Hi,
I have loaded the snort into pfsense 1.01 but I was unable to start it.
The logs show the following error:
Oct 31 00:11:40 SnortStartup[2802]: Ram free BEFORE starting Snort: 354M -- Ram free AFTER starting Snort: 354M -- Mode ac-std -- Snort memory usage:
Oct 31 00:11:23 snort[2791]: FATAL ERROR: /usr/local/etc/snort/snort.conf(42) => Unable to open the IIS Unicode Map file '/usr/local/etc/snort/unicode.map'.
Oct 31 00:11:23 snort[2791]: FATAL ERROR: /usr/local/etc/snort/snort.conf(42) => Unable to open the IIS Unicode Map file '/usr/local/etc/snort/unicode.map'.
The only way I could get it going was to:
ln -s /usr/local/etc/snort/rules/unicode.map /usr/local/etc/snort/unicode.map
and to vi the /usr/local/etc/snort/snort.conf file and add $RULE_PATH to the two required files. Eg.
#Required files
include $RULE_PATH/classification.config
include $RULE_PATH/reference.config
This seems to be a bug or am I doing something drastically wrong ?
Thanks
