Re: Issue with snort 3 registered ruleset (still expects SNORT_LUA_PATH)

["Joel Esler \(jesler\) via Snort-devel" <snort-devel () lists snort org>]

Hey Noah,

I have been told by my team that this has been fixed.


-- 
Joel Esler
Manager, Communities Division
Cisco Talos Intelligence Group
http://www.talosintelligence.com | https://www.snort.org

> On Apr 26, 2020, at 10:29 AM, Noah Dietrich <noah_dietrich () 86penny org> wrote:
>
> Hello,
> While testing the Registered ruleset with snort 3.0.1 b2, I found a bug with the latest 3.0 rules:  
> snortrules-snapshot-3000.tar.gz.
>
> for the snort.lua file included in this ruleset, it still references the old SNORT_LUA_PATH.  I found that if you 
> remove the following lines from this file
> require('snort_config')
>
> conf_dir = os.getenv('SNORT_LUA_PATH')
>
> if ( not conf_dir ) then
>    conf_dir = '.'
> end
>
> dofile(conf_dir .. '/snort_defaults.lua')
> dofile(conf_dir .. '/file_magic.lua')
>
> and add these lines (From the latest snort.lua generated by the make process):
> include 'snort_defaults.lua'
> include 'file_magic.lua'
>
> everything works perfectly.
>
> Noah
> _______________________________________________
> Snort-devel mailing list
> Snort-devel () lists snort org
> https://lists.snort.org/mailman/listinfo/snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!

Attachment: smime.p7s
Description:

_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!