Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Snort Advanced » Fatal Error running Snort on Solaris

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Fatal Error running Snort on Solaris


Posted by randymchugh on May 18, 2005 11:21:47

I am getting the following error when trying to start snort on Solaris 8
bash-2.03# /usr/local/bin/snort -A full -c /usr/local/doc/snort/etc -l /tmp/sno
rt.log -N -y
Running in IDS mode
Log directory = /tmp/snort.log

Initializing Network Interface hme0

--== Initializing Snort ==--
Initializing Output Plugins!
Decoding Ethernet on interface hme0
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file /usr/local/doc/snort/etc

+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
ERROR: /usr/local/doc/snort/etc(1) => NULL rule type
Fatal Error, Quitting..

Can someone please tell me what I need to do to get it running? As anyone seen this error before and have an idea of the cause?
Thanks
Randy

Posted by chris on May 24, 2005 02:44:03

Hi Randy, I've not tried snort on solaris, but I've found this page on Network security, which might be of some help, it seems to suggest that snort might be looking in the wrong place for the rules files, check it out -
http://www.networksecurityarchive.org/html/Snort-Users/2005-02/msg00170.html
hopefully this helps,
Cheers,
Chris