Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[Snort-users] Error: /etc/snort/snort.conf(291) => invalid stream tcp policy option

651 views
Skip to first unread message

priyank shah

unread,
Feb 18, 2016, 5:46:32 AM2/18/16
to
Hello Snort-users,

I tried installing snort-2.9.8.0 on ubuntu 15.10 that I am running on Oracle VirtualBox. After the installation I tried running 

sudo snort -T -i eth0 -c /etc/snort/snort.conf

to check the configuration.
But I got an error saying 

Error: /etc/snort/snort.conf(291) => Invalid Stream TCP policy option
Fatal Error, Quitting..

Can anyone please help.

Thanks,
Pri

Al Lewis (allewi)

unread,
Feb 18, 2016, 5:52:02 AM2/18/16
to

Remove the -I eth0 to check the configuration.

 

Also.. its telling you that your problem is something on line 291 of your config file.

 

Error: /etc/snort/snort.conf(291)

 

 

Albert Lewis

QA Software Engineer

SOURCEfire, Inc. now part of Cisco

9780 Patuxent Woods Drive
Columbia, MD 21046 

Phone: (office) 443.430.7112

Email: all...@cisco.com 

priyank shah

unread,
Feb 18, 2016, 6:02:54 AM2/18/16
to
Hey Al,

I removed -i eth0. And since I'm using Ubuntu 15.10 my interfaces are named enp0s8 ans so on, but I tried removing it as well, still same error,

Error: /etc/snort/snort.conf(291) => Invalid Stream TCP policy option

Joel Esler (jesler)

unread,
Feb 18, 2016, 10:28:54 AM2/18/16
to
What does line 291 say in the snort.conf?

--
Joel Esler
Manager, Talos Group




------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140_______________________________________________
Snort-users mailing list
Snort...@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

kevadi...@gmail.com

unread,
Jun 26, 2020, 1:48:09 PM6/26/20
to
I am getting same error.

kenza Boudrioua

unread,
Nov 6, 2020, 1:24:16 PM11/6/20
to
Le vendredi 26 juin 2020 à 13:48:09 UTC-4, kevadi...@gmail.com a écrit :
> I am getting same error.
Hi kevadi
Did you be able to resolve the issue, I'm geting same error too

Thanks,
Kenza

Isaac Bly

unread,
Aug 14, 2021, 5:38:54 PM8/14/21
to
Hey all, I am having the same issue. I have looked over line 291 and preceding lines and cant find anything that seems wrong or invalid. Any help would be greatly apreciated.
0 new messages