Not a bug, Snort will copy the needed files once you set it up. You
need to select at minimum an interface to listen on and click save.
On 10/30/06, Brookenmire <[EMAIL PROTECTED]> wrote:
Hi,
I have loaded the snort into pfsense 1.01 but I was unable to start
it.
The logs show the following error:
Oct 31 00:11:40 SnortStartup[2802]: Ram free BEFORE starting Snort: 354M --
Ram free AFTER starting Snort: 354M -- Mode ac-std -- Snort memory usage:
Oct 31 00:11:23 snort[2791]: FATAL ERROR:
/usr/local/etc/snort/snort.conf(42) => Unable to open the
IIS Unicode Map file '/usr/local/etc/snort/unicode.map'.
Oct 31 00:11:23 snort[2791]: FATAL ERROR:
/usr/local/etc/snort/snort.conf(42) => Unable to open the
IIS Unicode Map file '/usr/local/etc/snort/unicode.map'.
The only way I could get it going was to:
ln -s /usr/local/etc/snort/rules/unicode.map
/usr/local/etc/snort/unicode.map
and to vi the /usr/local/etc/snort/snort.conf file and add $RULE_PATH to the
two required files. Eg.
#Required files
include $RULE_PATH/classification.config
include $RULE_PATH/reference.config
This seems to be a bug or am I doing something drastically wrong ?
Thanks
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
