Re: Rules just don't show up in SNortcenter

["Daniel Clark" <djclark () telpacific com au>]

Hi Matthew, 
I had the same problem, the answer for me was:-

    The snort.2.0.0.tar.gz file has a strange ruleset, each of the files
    eg. ftp.rules, is missing a hashed out section called # $Id: .
    whereas if you download the latest ruleset then the $Id has returned
    and snortcenter loads & parses the rules fine.

Maybe this isn't quite the same problem, but hope this helps.

Daniel Clark,

----- Original Message ----- 
From: "Matthew McCarty" <matthew () marketdatacenter net>
To: <snort-users () lists sourceforge net>
Sent: Tuesday, May 20, 2003 1:42 AM
Subject: [Snort-users] Rules just don't show up in SNortcenter


> I installed Snort, ACID, and Snort center according to this guys
> documentation:
>
> www.superhac.com
>
> The only difference is that my system is Redhat 8.0 and not 9.0
>
> When I go to update rules from the Internet it says there are no updates
> available.  Of course this does not make sense because when I go to view
> the rules no rules even show up.
>
> I have manually unpackaged the current rules into etc/snort/rules and
> have tried both the /etc/snort and etc/snort/rules line in the config
> file for the sensors located in /etc/snort -- they still do not show up
> in the Snort Console. I have looked at all the variables in the
> /var/html/www/snortcenter configuration file and am at a loss as to how
> to force the recognition of the signatures.
>
> Does anybody have any ideas?
>
>
>
> -- 
> Matthew McCarty <matthew () marketdatacenter net>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: If flattening out C++ or Java
> code to make your application fit in a relational database is painful, 
> don't do it! Check out ObjectStore. Now part of Progress Software.
> http://www.objectstore.net/sourceforge
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: ObjectStore.
If flattening out C++ or Java code to make your application fit in a
relational database is painful, don't do it! Check out ObjectStore.
Now part of Progress Software. http://www.objectstore.net/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users