[Snort-users] Re: Newbie - First run of snort - Solution by hit and miss

1/18

Hello,

I put the ' var RULE_PATH ' as ' /etc/snort/rules' in the snort.conf file
I untarred the Snort rules file which I downloaded from snort website,
- "snortrules-snapshot-2_2.tar" in the /etc/snort
A rules folder with many .rule files was created.

Now the snort runs :) .

I do not know why snort did not take the path '
/root/snortDir/snort-2.3.ORC2/rules' where the installation folder
(snort-2.3.ORC2) is located with another 'rules' folder in it.

Anyways I hope snort is running as it should.

Thanks.



My problem earlier:


On Tue, 18 Jan 2005 07:02:56 -0800, Jiju Menon <security4rrm@gmail.com> wrote:
> 1/18
>
> Hello Snort Users,
>
> The first time I ran Snort-2.3.ORC2 on Redhat9 I got the error
>
> ERROR: Unable to open rules file:
> /root/snortDir/snort-2.3.ORC2/rules/local.rules or
> /etc/snort//root/snortDir/snort-2.3.ORC2/rules/local.rules
> Fatal Error, Quitting..
>
> All the files are in the rules folder and the path given in the
> snort.conf file is correct.
>
> The Snort runs when I comment the include statements in the snort.conf file.
>
> I am running Snort as a root user and I feel he has access to the snort folder.
>
> Kindly help in this regard.
>
> Thank You.
> Menon
>


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users