Snort Forums Archive

Archive Home » Linux » Missing Rule folder

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Missing Rule folder

Posted by suresheva31 on September 20, 2006 19:37:33

Hi there,

I am installing snort in My PC for the first time.
I am running Fedora Core 5.0

I used the Fedora core 3.0 installation manual to install...and I have followed everything as it told in the doc...

Download the following Version:

pcre-6.3.tar.gz
snort-2.6.0.2.tar.gz

when I try to find the rules folder in the snort installation directory, I am not able to find that.

BTW,

When Did the "make install" in the snort directory.

I got the following message:

[code]

[root@localhost snort-2.6.0.2]# make install
Making install in src
make[1]: Entering directory `/root/snortinstall/snort-2.6.0.2/src'
Making install in sfutil
make[2]: Entering directory `/root/snortinstall/snort-2.6.0.2/src/sfutil'
make[3]: Entering directory `/root/snortinstall/snort-2.6.0.2/src/sfutil'
make[3]: Nothing to be done for `install-exec-am'.
make[3]: Nothing to be done for `install-data-am'.
make[3]: Leaving directory `/root/snortinstall/snort-2.6.0.2/src/sfutil'
make[2]: Leaving directory `/root/snortinstall/snort-2.6.0.2/src/sfutil'
Making install in win32
make[2]: Entering directory `/root/snortinstall/snort-2.6.0.2/src/win32'
make[3]: Entering directory `/root/snortinstall/snort-2.6.0.2/src/win32'
make[3]: Nothing to be done for `install-exec-am'.
make[3]: Nothing to be done for `install-data-am'.
make[3]: Leaving directory `/root/snortinstall/snort-2.6.0.2/src/win32'
make[2]: Leaving directory `/root/snortinstall/snort-2.6.0.2/src/win32'
Making install in output-plugins
........

[/code]

Above message was displayed till the end of make install command......this mean there is nothing was wrong in my installation procedure?

Any idea why?

Suresh

Posted by duh on September 21, 2006 06:36:34

If you are on FC5, i would just use the rpms availabel in the download section. Much easier.
If you need to compile for special options

Otherwise, you can just create the rules folder yourself. the snort.conf will have a line where you can point to it.

Posted by suresheva31 on September 21, 2006 06:46:53

so this mean, the message I posted above about the installation message, isn't any error message right? I guess Now I need to download the rules files manually and place them?

snortrules-snapshot-2.4.tar.gz....

I will try installing using the source file......if that does not work then I will move to RPM packaes....thank you

Suresh

Posted by duh on September 25, 2006 06:04:13

When installing from source you will commonly see the 'Nothing to do for ' message. It's quite normal, just depends on the Makefile that came with the source.