This is a discussion on Re: [Snort-users] Error in stock 2.2rc1 snort.conf file within the Snort forums, part of the System Security and Security Related category; Hi Bill, Are you using the flow-portscan module? The error message you're seeing comes from the flowps-snort....
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hi Bill,
Are you using the flow-portscan module? The error message you're seeing comes from the flowps-snort.c file... -Marty On Aug 3, 2004, at 5:51 PM, Bill Warren wrote: > I was running 2.0.0 that I had upgraded to 2.2 rc1 and Debian Woody > and could not get 2.2 rc1 to work. So, I removed the /etc/snort dir > and reinstalled 2.2 rc1. > I ran > ./configure > make > make install > > Then copied the etc dir to /etc/snort/etc and the rules dir to > /etc/snort/rules. > I am testing using it with > /usr/local/bin/snort -c /etc/snort/etc/snort.conf -T > and I get > /etc/snort/etc/snort.conf(506) Unable to create an IPSet from > [HOME_NET] > > At line 506 is > include classification.config > > The files classification.config is in the /etc/snort and the > /etc/snort/etc dir's. So, what am I missing? > > > -- > > ********************************** > Bill Warren > Optivel, Inc. > E-mail: bwarren@optivel.com > Voice: 317.275.2305 > Fax: 317.275.2301 > Web: http://www.optivel.com > ********************************** > > > ------------------------------------------------------- > This SF.Net email is sponsored by OSTG. Have you noticed the changes on > Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now, > one more big change to announce. We are now OSTG- Open Source > Technology > Group. Come see the changes on the new OSTG site. www.ostg.com > _______________________________________________ > Snort-users mailing list > Snort-users@lists.sourceforge.net > Go to this URL to change user options or unsubscribe: > https://lists.sourceforge.net/lists/...fo/snort-users > Snort-users list archive: > http://www.geocrawler.com/redir-sf.p...st=snort-users > > -- Martin Roesch - Founder/CTO, Sourcefire Inc. - (410)290-1616 Sourcefire: Intelligent Security Monitoring roesch@sourcefire.com - http://www.sourcefire.com Snort: Open Source Network IDS - http://www.snort.org ------------------------------------------------------- This SF.Net email is sponsored by OSTG. Have you noticed the changes on Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now, one more big change to announce. We are now OSTG- Open Source Technology Group. Come see the changes on the new OSTG site. www.ostg.com _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users |