16 Oct
2003
16 Oct
'03
14:00
The 03.10.09 at 15:05, Togan Muftuoglu wrote: Mmm, I don't know if you are off-line still...
If you have "snort" installed and configured and running you may see the following in your alert file
It doesn't start: Oct 16 14:49:45 nimrodel snort: FATAL ERROR: ERROR: Unable to open rules file: /etc/rules/bad-traffic.rules or /etc/snort//etc/rules/bad-traffic.rules There is no directory '/etc/rules/', nor '/etc/snort//etc/rules/'. There is a '/etc/snort/bad-traffic.rules', however. I wonder if the problem is: # Path to your rules files (this can be a relative path) var RULE_PATH /etc/rules in the 'snort.conf'. I have changed it, and it seems to work. I'll see... -- Cheers, Carlos Robinson