Home page logo
/

snort logo Snort mailing list archives

Re: Unable to create stub so rules files
From: Peter Bates <peter.bates () ucl ac uk>
Date: Tue, 27 Nov 2012 15:01:52 +0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello all

On 27/11/2012 14:47, C. L. Martinez wrote:
Nop, every time pp runs, creates an empty so_rules.rules file with the
same error described above ...

The same error will appear because PP tries to validate your Snort
configuration file and also looks for certain settings in there 
(such as dynamicengine/dynamicdetection directory)

If you comment out your rule include lines, does 

snort -i ethX -c /location/of/snort.conf -T

run to completion?

- -- 
Peter Bates
Senior Information Security Officer   Phone: +44(0)2076792049
Information Services Division         Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQEcBAEBAgAGBQJQtNXgAAoJELhVoVpEMS6Rv8AIALH5zH0Un4ZWpHlomu8N3JHN
NdX/LzHJvkxLzd93wbp/qoGcQ4dl5SMo01gfzh5QjCqgJJ23jDpFXwCnB5uDyx16
8rNQL/S4AtKokPgLgd168phKs1p0dqtyiYLlq7ysabSL59tXnvDFNMmjhM2hvZFb
1YIEv3GPpvWKW79PpuIUfZY0LBbi3Y7oP8FIuj/m6Bq26vWxp1K4hMdtyWWTQgK4
i6ioRpNHZImgXOf2gs6qYypqqVRDfGOho0uNkGWvD8RYS62mHk8lfdN30+/bmkpC
QZLHtJj8Xq1xQfJPRnCU4XPcDlP6mJ0v1kdtNGdyYFYSE3D4jF8Aq0kyD3cHJQg=
=MU1R
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Monitor your physical, virtual and cloud infrastructure from a single
web console. Get in-depth insight into apps, servers, databases, vmware,
SAP, cloud infrastructure, etc. Download 30-day Free Trial.
Pricing starts from $795 for 25 servers or applications!
http://p.sf.net/sfu/zoho_dev2dev_nov
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]