|
|
|
|
Snort Forums Archive
Archive Home » Snort Advanced » ERROR: unknown preprocessor "frag3_global"
Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.
[ Notice: Full Version of This Topic ]
ERROR: unknown preprocessor "frag3_global"
Posted by empco on July 01, 2005 21:43:19
I have installed Snort in Mac OS X 10.4 and here is what happens in terminal:
james:~ james$ sudo snort -c /etc/snort/snort.conf
Password:
Running in IDS mode
Initializing Network Interface en0
--== Initializing Snort ==--
Initializing Output Plugins!
Decoding Ethernet on interface en0
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file /etc/snort/snort.conf
+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
,-----------[Flow Config]----------------------
| Stats Interval: 0
| Hash Method: 2
| Memcap: 10485760
| Rows : 4099
| Overhead Bytes: 16400(%0.16)
`----------------------------------------------
ERROR: unknown preprocessor "frag3_global"
Fatal Error, Quitting..
james:~ james$
I installed snort via this guide: http://homepage.mac.com/duling/halfdozen/Snort-Howto.html
How can I get snort to function properly?
thanks,
james
|
|
Posted by roesch on July 02, 2005 20:36:21
Which version of Snort? Look in src/preprocessors and see if spp_frag3.c is in there. If it's not, then you
need to go back to frag2. Frag3 will be built-in once Snort 2.4 is released (hopefully next week).
-Marty
|
|
|
|
|
|
