Thread: Snort stopped working
hello,
i'm running ubuntu 11.04 , upgraded snort version 2.9.0.5..when updated rules, error messages came up..after changed paths of rule files , dynamicpreprocessor, strange error came , snort isn't running:
error: /etc/snort/snort.conf(250) => unknown stream5 global option (max_active_responses 2)
fatal error, quitting..
ideas causing error?
this happening because version have installed not compiled
./configure --enable-enable-active-response / -dactive_response
however, conf file using still contains information sending active responses when connection dropped (ie : tcp rst). effective way i've found fix install snort source. additionally can try commenting out active_response lines in snort.conf, iffy , won't work though ymmv.
consult snort manpages more info on this.
luck
Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [ubuntu] Snort stopped working
Ubuntu
Comments
Post a Comment