Snort Forums Archive

Archive Home » Windows » unable to open rules file in win2003

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

unable to open rules file in win2003

Posted by gzpaul on October 07, 2006 23:08:14

environment:
snort 2_6_0_2
mysql-5.0.24a-win32
apache_2.2.3-win32-x86-no_ssl
jpgraph-2.1.3
acid-0.9.6b23
php-5.1.6-Win32
adodb422
WinPcap_3_1
windows 2003 sp1

when run the snort use command:snort-c"c:\snort\etc\snort.conf"-l"c:\snort\log" -d -e -X,list errorsas follows
ERROR:unable to open rules files:../rules/local.rules or c:\snort\etc\../rules/local.rules
Fatal Error,Quitting..

Anyone have the answer?plese tell me as quicly as possible.

Posted by sjf1978 on October 12, 2006 12:01:21

Yea I'm getting the same thing and can't seem to solve it

Posted by sjf1978 on October 16, 2006 05:36:27

Hi think I may have the answer to our problem my friend just reading honeypot for windows by roger grimes and luckly he has a section on snort install so after following two other snort book I thought I'd give it a go. It says

NOTE the rule path variable located in the default snort.conf file might include a forward slash / at the end of each rule include statement, when it should be a backslash \ This is due to a unix translation problem. You'll want to do a search and replace on any instance of the incorrect slash

Typical got two books just on snort and they never mentioned this!!! Hope it helps!

Posted by dabba on November 01, 2006 01:05:56

Which snort rules have you downloaded and copied to the rules folder. Please check if local.rules file is there in the /rules folder.