That is exactly what I had done in each case Scott. I had selected my WAN interface and had pressed saved but still needed to do the below. I also tried selecting all/none/some of the snort rulesets, but the same issue.
-----Original Message----- From: Scott Ullrich [mailto:[EMAIL PROTECTED] Sent: Tuesday, 31 October 2006 12:55 AM To: [email protected] Subject: Re: [pfSense Support] Snort Not a bug, Snort will copy the needed files once you set it up. You need to select at minimum an interface to listen on and click save. On 10/30/06, Brookenmire <[EMAIL PROTECTED]> wrote: > > > > Hi, > > I have loaded the snort into pfsense 1.01 but I was unable to start > it. > > The logs show the following error: > Oct 31 00:11:40 SnortStartup[2802]: Ram free BEFORE starting Snort: 354M -- > Ram free AFTER starting Snort: 354M -- Mode ac-std -- Snort memory usage: > > Oct 31 00:11:23 snort[2791]: FATAL ERROR: > /usr/local/etc/snort/snort.conf(42) => Unable to open the > IIS Unicode Map file '/usr/local/etc/snort/unicode.map'. > > Oct 31 00:11:23 snort[2791]: FATAL ERROR: > /usr/local/etc/snort/snort.conf(42) => Unable to open the > IIS Unicode Map file '/usr/local/etc/snort/unicode.map'. > > The only way I could get it going was to: > ln -s /usr/local/etc/snort/rules/unicode.map > /usr/local/etc/snort/unicode.map > and to vi the /usr/local/etc/snort/snort.conf file and add $RULE_PATH to the > two required files. Eg. > #Required files > include $RULE_PATH/classification.config > include $RULE_PATH/reference.config > > This seems to be a bug or am I doing something drastically wrong ? > > Thanks --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
