Re: FATAL ERROR: /usr/local/etc/snort.conf(45) Unknown rule type: ipvar.

[waldo kitty <wkitty42 () windstream net>]

On 8/15/2011 21:32, alexus wrote:
> Anything specific ?
>
> On Aug 15, 2011 8:59 PM, "Joel Esler" <jesler () sourcefire com
> <mailto:jesler () sourcefire com>> wrote:
>  > Sounds like you may need to take a look at our recommended compile options at
> the top of the snort.conf in the etc/ directory.

i believe that joel is referencing the ipv6 compile option which enables ipv6 in 
snort... if you do not use ipv6, it should not be necessary to include support 
for it, IMHO...

however, one must also note that many are "running scared" of the ipv4 address 
depletion stuff and they are not realizing that the ip allocation folk still 
have several hundred thousand or more of ipv4 addresses available for 
assignment... just because the top dawgs (dogs for those without a southern US 
accent) don't have any more to allocate to the top level assigners is not really 
a reason to panic as has been seen in recent months... especially when one 
understands that RFC1918 addresses can/should be used on internal networks and 
only external facing machines really need WAN addresses that all can access...

i'm aware of several large corporations with (ancient nomenclature) class b and 
class c address blocks that are assigned to their internal lan machines which 
could easily be using RFC1918 addresses instead and that would, amongst other 
things, save them some $$$ on the cost of their address blocks ;)


------------------------------------------------------------------------------
uberSVN's rich system and user administration capabilities and model 
configuration take the hassle out of deploying and managing Subversion and 
the tools developers use with it. Learn more about uberSVN and get a free 
download at:  http://p.sf.net/sfu/wandisco-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please see http://www.snort.org/docs for documentation