Re: SNORT + PulledPork: FATAL ERROR: ... Invalid configuration line

[waldo kitty <wkitty42 () windstream net>]

On 12/19/2014 10:37 PM, RŌNIN wrote:
> Dec 19 21:39:18 snortest snort[17305]: FATAL ERROR:
> /etc/snort/rules/blacklist.rules(1) Invalid configuration line:
> 1.120.215.97#012
>
> What's wrong here?

confusion between the two blacklist files used with snort... one is used for the 
reputation processor and the other is a normal plain text rules file... they are 
separate entities and have very different formats...

check your snort.conf for the one used in your reputation processor section and 
then the one listed in your rules section... they should have different file 
names... then check your pulledpork and ensure it is using the proper names in 
the proper sections (if there is such)...

-- 
  NOTE: No off-list assistance is given without prior approval.
        Please *keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!