Snort mailing list archives
snort.conf problem: i think
From: "Kevin Moker" <kevin.moker () snet net>
Date: Fri, 25 Jan 2002 15:16:45 -0500
Can someone tell me what I am doing wrong? I am running snort on win2k (yeah, I know, that's my first mistake) and
need to figure out why the following error is coming up. I am new to snort and I am having some difficulties with it.
Here is the error:
C:\snort>snort -dev -l c:\inetpub\wwwroot\Logs -h 10.0.0.13/24 -c snort.conf
--== Initializing Snort ==--
Initializing Network Interface \Device\Packet_{A4B3B48F-2737-45FB-82D6-D79E5EA5C55D}
Decoding Ethernet on interface \Device\Packet_{A4B3B48F-2737-45FB-82D6-D79E5EA5C55D}
Initializing Preprocessors!
Initializing Plug-ins!
Initializating Output Plugins!
+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
*WARNING*: unknown preprocessor "frag2", ignoring!
*WARNING*: unknown preprocessor "stream4", ignoring!
*WARNING*: unknown preprocessor "stream4_reassemble", ignoring!
*WARNING*: unknown preprocessor "rpc_decode", ignoring!
*WARNING*: unknown preprocessor "bo", ignoring!
*WARNING*: unknown preprocessor "telnet_decode", ignoring!
Using LOCAL time
Error: Unknown config: classification
This command works:
C:\snort>snort -dev -l c:\inetpub\wwwroot\Logs -h 10.0.0.13/24
--== Initializing Snort ==--
Initializing Network Interface \Device\Packet_{A4B3B48F-2737-45FB-82D6-D79E5EA5C55D}
Decoding Ethernet on interface \Device\Packet_{A4B3B48F-2737-45FB-82D6-D79E5EA5C55D}
--== Initialization Complete ==--
-*> Snort! <*-
Version 1.7-WIN32
By Martin Roesch (roesch () clark net, www.snort.org)
WIN32 Port By Michael Davis (mike () datanerds net, www.datanerds.net/~mike)
This is why I think it's the conf file but I don't have enough knowledge yet on this. Can someone help?
Current thread:
- snort.conf problem: i think Kevin Moker (Jan 25)
- Re: snort.conf problem: i think Matt Kettler (Jan 25)
