Ok, so doing this broke snort but starting snort from command line I was able to see that it had issues with some of the rules. I had to edit /etc/snort/snort.conf and comment out the following rulesets to get it to work:
include $RULE_PATH/ftp.rules include $RULE_PATH/web-client.rules include $RULE_PATH/netbios.rules Afterwards I was able to get snort to start successfully from the console and from the web interface. I haven't looked into the rulesets yet to see which particular rule was causing snort to croak. You can run snort from the command line with the following: snort -c /etc/snort/snort.conf and it will tell you where the problem might be. Offtopic: Anybody have an idea why my name is showing up as h-h2? I've double checked my e-mail options to make sure my name is set correcly. ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Efw-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/efw-user
