Re: (standard_in) 1: syntax error
"Russ Combs \(rucombs\) via Snort-users" <[email protected]> Tue, 5 Mar 2024 16:48:26 +0000
| Newsgroups | gmane.comp.security.ids.snort.general |
|---|---|
| Message-ID | <MN2PR11MB404874E8683DF8AF1AD87763B7222@MN2PR11MB4048.namprd11.prod.outlook.com> |
Charlie, Those scripts are a little tedious to use. You should first run validate.sh which will let you see the errors. When you see "Snort successfully validated the configuration" at the end of the output, you can run the tests with repeat.sh. Both scripts take the same args. Russ ________________________________ From: Snort-users <[email protected]> on behalf of Li, Charlie via Snort-users <[email protected]> Sent: Thursday, February 29, 2024 11:24 AM To: [email protected] <[email protected]> Subject: [Snort-users] (standard_in) 1: syntax error [AMD Official Use Only - General] Hello, Yesterday I installed the latest Snort3 and ran into the following error. On Feb 5th, I installed Snort3 (Version 3.1.78.0) on another system and did not see this error. Is something changed from 3.1.78.0 to 3.1.81.0, or did I miss something? Thanks, Charlie --------------------------------------------------------------------------------------- ~/snort/snort3_demo/perf/3.0$ /usr/local/snort/bin/snort --V ,,_ -*> Snort++ <*- o" )~ Version 3.1.81.0 '''' By Martin Roesch & The Snort Team http://snort.org/contact#team Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved. Copyright (C) 1998-2013 Sourcefire, Inc., et al. Using DAQ version 3.0.14 Using LuaJIT version 2.1.0-beta3 Using OpenSSL 3.0.2 15 Mar 2022 Using libpcap version 1.10.1 (with TPACKET_V3) Using PCRE version 8.39 2016-06-14 Using ZLIB version 1.2.11 Using Hyperscan version 5.4.2 2024-02-28 Using LZMA version 5.2.5 ~/snort/snort3_demo/perf/3.0$ ./perf_test.sh hyperscan 3 1 # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg decode, hyperscan, 3, defcon, 1, 1.008017, 1.010860, 1.009111, 1.008017, 1.010860, 1.009 # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg stream, hyperscan, 3, defcon, 1, 1.943182, 1.951889, 1.936857, 1.936857, 1.951889, 1.943 # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg inspect, hyperscan, 3, defcon, 1, (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error (standard_in) 1: syntax error , 99999, 0, # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg detect-min, hyperscan, 3, defcon, 1, (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error (standard_in) 1: syntax error , 99999, 0, # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg detect-max, hyperscan, 3, defcon, 1, (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error (standard_in) 1: syntax error , 99999, 0, # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg network-awareness, hyperscan, 3, defcon, 1, 1.871996, 1.872648, 1.886586, 1.871996, 1.886586, 1.877 # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg decode, hyperscan, 3, get250, 1, 0.749924, 0.723653, 0.723533, 0.723533, 0.749924, .732 # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg stream, hyperscan, 3, get250, 1, 1.341746, 1.300720, 1.295390, 1.295390, 1.341746, 1.312 # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg inspect, hyperscan, 3, get250, 1, (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error (standard_in) 1: syntax error , 99999, 0, # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg detect-min, hyperscan, 3, get250, 1, (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error (standard_in) 1: syntax error , 99999, 0, # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg detect-max, hyperscan, 3, get250, 1, (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error (standard_in) 1: syntax error , 99999, 0, # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg network-awareness, hyperscan, 3, get250, 1, 1.173541, 1.169397, 1.178658, 1.169397, 1.178658, 1.173 # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg decode, hyperscan, 3, maccdc, 1, 3.324531, 3.322455, 3.325824, 3.322455, 3.325824, 3.324 # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg stream, hyperscan, 3, maccdc, 1, 12.084947, 12.098095, 12.099420, 12.084947, 12.099420, 12.094 # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg inspect, hyperscan, 3, maccdc, 1, (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error (standard_in) 1: syntax error , 99999, 0, # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg detect-min, hyperscan, 3, maccdc, 1, (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error (standard_in) 1: syntax error , 99999, 0, # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg detect-max, hyperscan, 3, maccdc, 1, (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error , (standard_in) 1: syntax error (standard_in) 1: syntax error (standard_in) 1: syntax error , 99999, 0, # conf, mpse, num, pcap, z, run1, run2, run3, min, max, avg network-awareness, hyperscan, 3, maccdc, 1, 11.660338, 11.619632, 11.614051, 11.614051, 11.660338, 11.631 _______________________________________________ Snort-users mailing list [email protected] Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users To unsubscribe, send an email to: [email protected] Please visit http://blog.snort.org to stay current on all the latest Snort news! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette