RE: Fatal Error cause snort can not startup

["Harper, Patrick" <patrick.harper () phns com>]

# http_inspect: normalize and detect HTTP traffic and protocol anomalies
#
# lots of options available here. See doc/README.http_inspect.
# unicode.map should be wherever your snort.conf lives, or given
# a full path to where snort can find it.
preprocessor http_inspect: global \
    iis_unicode_map unicode.map 1252



 

  _____  

From: kinux [mailto:kinux () hknet com] 
Sent: Monday, May 24, 2004 6:46 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Fatal Error cause snort can not startup


hi 
 
i installed snort on a freebsd box, it work with mysql, acid, i found
there is an problem in /var/messages which make snort can not work.
What's the problem?? 

May 22 17:38:23 snort /kernel: xl0: promiscuous mode enabled
May 22 17:38:23 snort snort: Initializing daemon mode
May 22 17:38:23 snort snort: PID path stat checked out ok, PID path set
to /var/run/
May 22 17:38:23 snort snort: Writing PID "38172" to file
"/var/run//snort_xl0.pid"
May 22 17:38:23 snort snort: ,-----------[Flow
Config]----------------------
May 22 17:38:23 snort snort: | Stats Interval: 0
May 22 17:38:23 snort snort: | Hash Method: 2
May 22 17:38:23 snort snort: | Memcap: 10485760
May 22 17:38:23 snort snort: | Rows : 4099
May 22 17:38:23 snort snort: | Overhead Bytes: 16400(%0.16)
May 22 17:38:23 snort snort:
`----------------------------------------------
May 22 17:38:23 snort snort: FATAL ERROR:
/usr/local/etc/snort/conf/snort.conf(285) => Invalid file name for IIS
Unicode Map f
ile.
May 22 17:38:23 snort /kernel: xl0: promiscuous mode disabled 

i read this post
http://msgs.securepoint.com/cgi-bin/get/snort-0403/373.html 
then follow it cp Unicode.Map to rules directory, it still not work?? 




Disclaimer:
This electronic message, including any attachments, is confidential and intended solely for use of the intended 
recipient(s). This message may contain information that is privileged or otherwise protected from disclosure by 
applicable law. Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. If you have 
received this message in error, please delete it and notify the sender immediately.