RE: Fatal Error cause snort can not startup

[SN ORT <snort_on_acid () yahoo com>]

Try this in your snort.conf:

preprocessor http_inspect: global \
    iis_unicode_map
/usr/local/etc/snort/etc/unicode.map 1252

Cheese!
Marc

-----------------Original
Message-----------------------
--__--__--

Message: 6
From: "kinux" <kinux () hknet com>
To: <snort-users () lists sourceforge net>
Date: Mon, 24 May 2004 20:46:08 +0800
Subject: [Snort-users] Fatal Error cause snort can not
startup

This is a multi-part message in MIME format.

------=_NextPart_000_0011_01C441D0.23A845D0
Content-Type: text/plain;
        charset="big5"
Content-Transfer-Encoding: quoted-printable

hi=20

i installed snort on a freebsd box, it work with
mysql, acid, i found =
there is an problem in /var/messages which make snort
can not work. =
What's the problem??=20
May 22 17:38:23 snort /kernel: xl0: promiscuous mode
enabled
May 22 17:38:23 snort snort: Initializing daemon mode
May 22 17:38:23 snort snort: PID path stat checked out
ok, PID path set =
to /var/run/
May 22 17:38:23 snort snort: Writing PID "38172" to
file =
"/var/run//snort_xl0.pid"
May 22 17:38:23 snort snort: ,-----------[Flow =
Config]----------------------
May 22 17:38:23 snort snort: | Stats Interval: 0
May 22 17:38:23 snort snort: | Hash Method: 2
May 22 17:38:23 snort snort: | Memcap: 10485760
May 22 17:38:23 snort snort: | Rows : 4099
May 22 17:38:23 snort snort: | Overhead Bytes:
16400(%0.16)
May 22 17:38:23 snort snort: =
`----------------------------------------------
May 22 17:38:23 snort snort: FATAL ERROR: =
/usr/local/etc/snort/conf/snort.conf(285) =3D> Invalid
file name for IIS =
Unicode Map f
ile.
--------------------------------------------------------


        
                
__________________________________
Do you Yahoo!?
Yahoo! Domains – Claim yours for only $14.70/year
http://smallbusiness.promotions.yahoo.com/offer 


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users