[Snort-users] rules problem

[MCLEOD, DONNIE]

Hi Can anyone help with this,?

I keep getting this trying to config snort on windows xp

Initializing rule chains...
ERROR: C:\snort\etc\snort.conf(507) Unknown rule type: snort.
fatal Error, Quitting..

C:\snort\bin>

THIS IS THE COMMAND I TYPED IN;

C:\snort\bin>snort.exe -i1 -s  -l C:\snort\log\ -c C:\snort\etc\snort.conf -T


Cheers Donnie

[Y M]

Check the rules section in the snort.conf files. Do you have a rules file with the name snort.rules? Also check the rules folder path in your conf file.

---

From: MCLEOD, DONNIE
Sent: ‎4/‎19/‎2013 3:17 PM
To: snort...@lists.sourceforge.net
Subject: [Snort-users] rules problem

[Joel Esler]

On Apr 19, 2013, at 8:01 AM, "MCLEOD, DONNIE" <DMCL...@caledonian.ac.uk> wrote:

Initializing rule chains...
ERROR: C:\snort\etc\snort.conf(507) Unknown rule type: snort.
fatal Error, Quitting..

C:\snort\bin>

THIS IS THE COMMAND I TYPED IN;

C:\snort\bin>snort.exe -i1 -s  -l C:\snort\log\ -c C:\snort\etc\snort.conf -T

What is on line 507 of your snort.conf?

Please attach your snort.conf

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire

[Y M]

 Looks like there an information text line that is uncommented, right after the DNP3 preprocessor, line 507, it says "snort is". If you comment that line, and try again, do you still get the same error?

---

From: DMCL...@caledonian.ac.uk
To: sn...@outlook.com
Subject: RE: [Snort-users] rules problem
Date: Fri, 19 Apr 2013 13:21:40 +0000

Hi YM, yes I've tried this but sill get Error messages,I have attach the basic config I'am using and a screenshot of the cmd line Error ant ideas,

thanks Don

---

From: Y M [sn...@outlook.com]
Sent: 19 April 2013 13:33
To: MCLEOD, DONNIE; snort...@lists.sourceforge.net
Subject: RE: [Snort-users] rules problem

Check the rules section in the snort.conf files. Do you have a rules file with the name snort.rules? Also check the rules folder path in your conf file.

---

From: MCLEOD, DONNIE
Sent: ‎4/‎19/‎2013 3:17 PM
To: snort...@lists.sourceforge.net
Subject: [Snort-users] rules problem

Hi Can anyone help with this,?

I keep getting this trying to config snort on windows xp

Initializing rule chains...
ERROR: C:\snort\etc\snort.conf(507) Unknown rule type: snort.
fatal Error, Quitting..

C:\snort\bin>

THIS IS THE COMMAND I TYPED IN;

C:\snort\bin>snort.exe -i1 -s  -l C:\snort\log\ -c C:\snort\etc\snort.conf -T

Cheers Donnie

[waldo kitty]

On 4/19/2013 08:01, MCLEOD, DONNIE wrote:
> Hi Can anyone help with this,?
>
> I keep getting this trying to config snort on windows xp
>
> Initializing rule chains...
> ERROR: C:\snort\etc\snort.conf(507) Unknown rule type: snort.
> fatal Error, Quitting..

this shows that the error is detected at line 507 of your snort.conf file...
please post your snort.conf so we can take a look at it...

> C:\snort\bin>
>
> THIS IS THE COMMAND I TYPED IN;
>
> C:\snort\bin>snort.exe -i1 -s -l C:\snort\log\ -c C:\snort\etc\snort.conf -T

that command line should be ok... your problem(s) is(are) in your config file...

--
NOTE: No off-list assistance is given without prior approval.
Please keep mailing list traffic on the list unless
private contact is specifically requested and granted.

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
Snort-users mailing list
Snort...@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!