-----BEGIN PGP SIGNED MESSAGE-----
On 28/11/2012 07:48, C. L. Martinez wrote:
Generating Stub Rules....
An error occurred: ERROR:
/data/config/etc/idpsnort01/rules/VRT-backdoor.rules(0) Unable to open
rules file "/data/config/etc/idpsnort01/rules/VRT-backdoor.rules": No
such file or directory.
An error occurred: Fatal Error, Quitting..
If your Snort configuration is passing -T,
then you should probably try running PP with -v or -vv
to find out exactly what is going wrong when this error occurs.
It looks rather like PP is unpacking the rules and then looking in another
directory for the unpacked rules, but why that should be the case is a mystery!
Somebody knows if it is possible to generate new sid-msg.map once stub
rules are created??
I'd investigate why PP isn't working - there was
'create-sidmap.pl' in Oinkmaster which did a similar job
once the .rules are in place.
Do you have PP set to generate one .rules and one for your SO rules,
or is it set to put rules into seperate files?