Snort mailing list archives
Startup Problem
From: eric-dated-1083277626.193075aa63e273 () catastrophe net
Date: Sat, 3 Apr 2004 12:32:17 -0600
I'm having a startup problem here with snort..the error message I
get is the following...
Apr 3 12:12:16 pluto snort: FATAL ERROR:
/var/snort/etc/snort.conf(34) => Invalid configuration token
'server'. The first configuration must start with a 'global'
configuration type.
This is when I try to start snort with the following syntax.
# /var/snort/bin/snort -c /var/snort/etc/snort.conf \
-i em1 -Cbd -t /var/snort -l /var/snort/log/em1
My configuration looks like this -- any assistance is appreciated.
var HOME_NET 10.1.1.0/24
var EXTERNAL_NET any !$HOME_NET
var SMTP_SERVERS $HOME_NET
var HTTP_SERVERS $HOME_NET
var SQL_SERVERS $HOME_NET
var TELNET_SERVERS $HOME_NET
var SNMP_SERVERS $HOME_NET
var HTTP_PORTS 80
var SHELLCODE_PORTS !80
var ORACLE_PORTS 1521 1523
var RULE_PATH /var/snort/rules
config umask: 027
config daemon
config dump_payload
config set_uid: 5000
config set_gid: 5000
config alert_with_interface_name
config disable_decode_alerts
config show_year
config quiet
config disable_tcpopt_experimental_alerts
config disable_tcpopt_obsolete_alerts
config disable_tcpopt_ttcp_alerts
config disable_tcpopt_alerts
config disable_ipopt_alerts
preprocessor http_inspect_server: \
server default \
profile all \
ports { 80 8080 3128 } \
no_alerts
preprocessor flow: \
memcap 16777216 \
stats_interval 0 \
hash 1
include $RULE_PATH/local.rules
include classification.config
include reference.config
Thanks.
- Eric
-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Startup Problem eric-dated-1083277626 . 193075aa63e273 (Apr 03)
- Re: Startup Problem Michael Boman (Apr 05)
