RE: snort -T failure

[McClure Gammon <gammon.mcclure () volvo com>]

Martina,

First, make sure that the var RULE_PATH is set in snort.conf.  Second, run snort -T -c /path to snort.conf/snort.conf

See if that doesn't fix the problem.

Gammon

-----Original Message-----
From: Martina Podesser [mailto:Martina.Podesser () at flextronics com]
Sent: Thursday, August 22, 2002 5:39 AM
To: 'snort-users () lists sourceforge net'
Subject: [Snort-users] snort -T failure



hello,

Yesterday I wrote because I had a problem with 'unicode'. I found out that I
installed the wrong version of snortrules. Now I installed
snort-1.8.7.tar.gz and snortrules.tar.gz following the manual Snort, MySQL,
Redhat 7.2. 
I tried the snort -T command again and got a new failure message: 

[root@localhost inprog]# snort -T
Log directory = /var/log/snort
Initializing Network Interface eth0
using config file /root/.snortrc
Initializing Preprocessors!
Initializing Plug-ins!
Initializating Output Plugins!
Parsing Rules file /root/.snortrc
+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
ERROR: Unable to open rules file: /root/.snortrc or /root//root/.snortrc
Fatal Error, Quitting.. 

I didn't found the .snortrc file on the redhat mashine. Why snort wants to
use the .snortrc file to inizialise and not the snort.conf file? What can I
do now to run snort?

best regards
martina podesser


FLEXTRONICS 
World Trade Center
A-1300 Vienna 
Austria
Martina.Podesser () at flextronics com 
www.flextronics.com 



FLEXTRONICS 
World Trade Center
A-1300 Vienna 
Austria
Martina.Podesser () at flextronics com 
www.flextronics.com 



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users