Re: Upgrading snort 2.0.* to -> 2.1.2 , and now i cant ....

[soldier Mx <soldi3rmx () yahoo com mx>]

i really cant find in the manul the option to upgrade
2.0.* to 2.1.*  ,, and the steps to change http_decode
to -> http_inspect ..

help ?¿?¿




 --- Michael Boman <michael.boman () boseco com>
escribió: > This is starting to become a FAQ...
> http_decode preprocessor has been replaced with
> http_inspect, update
> snort.conf accordingly (check out the manual for
> Snort on snort.org how
> to configure it).
>
> Best regards
>  Michael Boman
>
> On Mon, 2004-06-07 at 16:39, soldier Mx wrote:
> >  Hey i upgraded Snort 2.0.5  to 2.1.2 and...
> >
> > now i cant run Snort...
> >  I just upgraded, i didnt modify anything.. just 
> > made the up grade.... i think i have to change
> > something, but i dont know where to start..
> >
> > here i show..
> >
> > root@linux tripwire # /etc/init.d/snort status
> >  * status:  started
> > root@linux tripwire # /etc/init.d/snort zap
> >  * Manually resetting snort to stopped state.
> > root@linux tripwire # /etc/init.d/snort start
> >  * Starting snort...                              
>    
> >                    [ ok ]
> > root@linux tripwire # ps aux |grep snort
> > root     14550  0.0  0.3  1516  436 pts/2    S   
> > 03:33   0:00 grep snort
> > root@linux tripwire #
> >
> >
> > How you can see, the daemon is not running and i
> get
> > this in the LOGS...
> >
> >
> > Jun  7 03:32:55 linux snort: Initializing daemon
> mode
> > Jun  7 03:32:55 linux snort: PID path stat checked
> out
> > ok, PID path set to /var/run/
> > Jun  7 03:32:55 linux snort: Writing PID "16857"
> to
> > file "/var/run//snort_eth0.pid"
> > Jun  7 03:32:56 linux snort: FATAL ERROR:  unknown
> > preprocessor "`k^\^H_decode"
> > Jun  7 03:32:55 linux kernel: device eth0 entered
> > promiscuous mode
> > Jun  7 03:32:56 linux kernel: device eth0 left
> > promiscuous mode
> >
> >
> >
> > THankssss if you can help me!
> >
> > from mexico
>
> Best regards
>  Michael Boman
>
> -- 
> Michael Boman <michael.boman () boseco com>
> BOSECO Internet Security Solutions -
> http://www.boseco.com
-------------------------------------------------------
> This SF.Net email is sponsored by: GNOME Foundation
> Hackers Unite!  GUADEC: The world's #1 Open Source
> Desktop Event.
> GNOME Users and Developers European Conference,
> 28-30th June in Norway
> http://2004/guadec.org
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or
> unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users 

_________________________________________________________
Do You Yahoo!?
La mejor conexión a internet y 25MB extra a tu correo por $100 al mes. http://net.yahoo.com.mx


-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
> From Windows to Linux, servers to mobile, InstallShield X is the
one installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users