RE: Newbie: Problem with SNORT

["Harper, Patrick" <patrick.harper () phns com>]

Try starting it form the command line snort -c /etc/snort/snort.conf and
see if you are having problems with the changes you made to the .rules
files.  If will bark at you and let you know what is happening 

-----Original Message-----
From: Royce Sherman [mailto:list () rsherm com] 
Sent: Monday, August 02, 2004 11:12 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Newbie: Problem with SNORT

I have set SNORT up on RHEL 3.0.  I have followed the set-up guide for
fedora core2 from RPM.  When I try and start it, it will run for a few
minutes then die.  Looking at the logs nothing is ever log in the snort
log file.  When I look in the message log file I get: snort: FATAL
ERROR:
Undefined variable name: <some rule> .  I have disabled 6 rules so far. 
What have I done wrong? Or what do I need to do to get this running
continuous?

TIA
Royce


-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





Disclaimer:
This electronic message, including any attachments, is confidential and intended solely for use of the intended 
recipient(s). This message may contain information that is privileged or otherwise protected from disclosure by 
applicable law. Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. If you have 
received this message in error, please delete it and notify the sender immediately. 





-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users