Bug #1822

Snort won't start

Added by Stephen Lombard almost 2 years ago. Updated 4 months ago.

Status:Closed Start date:08/30/2011
Priority:High Due date:
Assignee:- % Done:

0%
Category:Snort
Target version:-
Affected version:All Affected Architecture:All

Description

So many issues with this package.

1) Local rules get wiped every time the auto updater runs. Then we have to go through a process of extracting a tar.gz file to put them back.

2) Have to keep creating local.rules before snort will work.

Detection:
Search-Method = AC-Full-Q
Split Any/Any group = enabled
Search-Method-Optimizations = enabled
Maximum pattern length = 20
ERROR: Unable to open rules file "/usr/local/etc/snort/../rules/local.rules": No such file or directory.
Fatal Error, Quitting..

3) There's that libpcap.so error as well as the various directories which need to be symlinked.

But none more serious than this:

4)

ERROR: /usr/local/etc/snort/snort.conf(200) => Invalid keyword 'compress_depth' for 'global' configuration.
Fatal Error, Quitting..

Any chance of supplying a fix for this?

History

#1 Updated by Ermal Luçi almost 2 years ago

  • Affected version changed from 2.0 to All

This is for snort-dev from what i can see!?

#2 Updated by Jim P 4 months ago

  • Status changed from New to Closed

Also available in: Atom PDF