Home page logo

snort logo Snort mailing list archives

Re: so_rules are not processed by pulledpork underFreeBSD 9.1
From: "C. L. Martinez" <carlopmart () gmail com>
Date: Thu, 9 May 2013 13:58:31 +0000

On Thu, May 9, 2013 at 1:52 PM, Seth Dunn <seth () d2ms com> wrote:
One other thing to look at:
        Snort Config File: /data/config/etc/idpsnort01/snort.conf
        Snort Path is: /usr/local/bin/snort
        SO Output Path is: /data/config/etc/idpsnort01/so_rules/

And your error shows::
An error occurred: ERROR:
/data/config/etc/idpsnort01/rules/VRT-app-detect.rules(0) Unable to open
rules file
"/data/config/etc/idpsnort01/rules/VRT-app-detect.rules": No such file
or directory.

Is there a /rules/ or /so_rules/ folder in which PP is working with?

/so_rules/ directory configured under pulledpork.conf, exists:

root () plzfnsm01:/tmp# ls -la /data/config/etc/idpsnort01/so_rules
total 8
drwxr-xr-x  2 root  wheel  512 May  9 06:03 .
drwxr-xr-x  5 root  wheel  512 May  9 13:55 ..

but, pulledpork is working under:

Generating Stub Rules....
        Generating shared object stubs via:/usr/local/bin/snort -c
        An error occurred:

 ... and I don't understand why ...

Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

Please visit http://blog.snort.org to stay current on all the latest Snort news!

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]