Re: snort.lua broken thus pulledpork doesn't discover snort
Joel Esler via Snort-users <[email protected]>
| Newsgroups | gmane.comp.security.ids.snort.general |
|---|---|
| Message-ID | <[email protected]> |
A guarantee if you google “snort error 422” the whole first page will be answers to this problem. I’ve answered this personally, probably a hundred times over the past 8 years. — Sent from my iPhone > On Jun 26, 2022, at 13:53, Dorian ROSSE <[email protected]> wrote: > > > now pulledpork has a new error : it is error 422 ! > > snort has loosen all brain : all line of command launch for snort answere nothing ! > > what i need to do ? > > thanks you in advance for your help, > > regards. > > > dorian rosse. > De : Dorian ROSSE <[email protected]> > Envoyé : dimanche 26 juin 2022 18:03 > À : Joel Esler <[email protected]> > Cc : [email protected] <[email protected]>; [email protected] <[email protected]> > Objet : Re: [Snort-users] snort.lua broken thus pulledpork doesn't discover snort > > Joel, > > > I have ever tried to repair without success thus I wait a real help instead of just an answer without help, > > The snort.lua is the previous ever working before I install a new time the laptop I think there are some problems by the system for understand the some programs between itself, > > Thanks you in advance to really help myself, > > Regards. > > > Dorian Rosse. > From: Joel Esler <[email protected]> > Sent: Sunday, June 26, 2022 2:28:00 PM > To: Dorian ROSSE <[email protected]> > Cc: [email protected] <[email protected]>; [email protected] <[email protected]> > Subject: Re: [Snort-users] snort.lua broken thus pulledpork doesn't discover snort > > You have two different problems. I suggest you read your error messages. > > — > Sent from my iPhone > >>> On Jun 24, 2022, at 17:35, Dorian ROSSE via Snort-users <[email protected]> wrote: >>> >> >> hello, >> >> >> snort.lua broken thus pulledpork doesn't discover snort : >> ~/snort_src/pulledpork-master$ sudo /usr/local/bin/pulledpork.pl -c /usr/local/etc/pulledpork/pulledpork.conf -l -P -E -T >> >> https://github.com/shirkdog/pulledpork >> _____ ____ >> `----,\ ) >> `--==\\ / PulledPork v0.8.0 - The only positive thing to come out of 2020...well this and take-out liquor! >> `--==\\/ >> .-~~~~-.Y|\\_ Copyright (C) 2009-2021 JJ Cummings, Michael Shirk >> @_/ / 66\_ and the PulledPork Team! >> | \ \ _(") >> \ /-| ||'--' Rules give me wings! >> \_\ \_\\ >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >> >> Use of uninitialized value $Value in pattern match (m//) at /usr/local/bin/pulledpork.pl line 167, <CONFIG> line 20. >> readline() on closed filehandle FH at /usr/local/bin/pulledpork.pl line 1647. >> Use of uninitialized value $Snort in ord at /usr/local/bin/pulledpork.pl line 1924. >> You need to define an oinkcode, please review the rule_url section of the pulledpork config file! >> at /usr/local/bin/pulledpork.pl line 2121. >> ''' >> >> '''sudo /usr/local/bin/snort -V >> sudo: /usr/local/bin/snort : commande introuvable''' >> >> '''snort -c /usr/local/etc/snort/snort.lua >> Running in IDS mode >> >> --== Initializing Snort ==-- >> Initializing Output Plugins! >> Initializing Preprocessors! >> Initializing Plug-ins! >> Parsing Rules file "/usr/local/etc/snort/snort.lua" >> ERROR: /usr/local/etc/snort/snort.lua(1) Invalid configuration line: --------------------------------------------------------------------------- >> >> Fatal Error, Quitting.. >> ''' >> >> thanks you in advance to help myself fully install snort and pulledpork for sanitize my network, >> >> regards. >> >> >> dorian rosse. >> >> _______________________________________________ >> Snort-users mailing list >> [email protected] >> Go to this URL to change user options or unsubscribe: >> https://lists.snort.org/mailman/listinfo/snort-users >> >> To unsubscribe, send an email to: >> [email protected] >> >> Please visit http://blog.snort.org to stay current on all the latest Snort news! >> >> Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette _______________________________________________ Snort-users mailing list [email protected] Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users To unsubscribe, send an email to: [email protected] Please visit http://blog.snort.org to stay current on all the latest Snort news! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette