Results 1 to 1 of 1
Hi,
Trying to get Snort running with Debian. I got all the lastest patches I need. I got everything set up up to a certain point. I am trying to ...
- 11-05-2008 #1Just Joined!
- Join Date
- Oct 2008
- Posts
- 11
Need Help with Snort's rules.
Hi,
Trying to get Snort running with Debian. I got all the lastest patches I need. I got everything set up up to a certain point. I am trying to run this command.
/usr/local/bin/snort -Dq -u snort -g snort -c /etc/snort/etc/snort.conf
It runs, then I look into the syslog and see that it can't run all the way. I get this error code..
FATAL ERROR: Undefined variable name: (/etc/snort/rules/local.rules:
: HOME
I was trying to set up some basic rules I guess for this to run.
alert icmp any any -> $HOME_NET any (msg:"ICMP test"; dsize:8; itype:8; sid: 10000001
and
alert tcp any any -> any any (msg:"test"; sid:1000002
Just something basic to see if this thing works. I have not set up mysql or BASE / ACID , or Barnyard. I did get the snort-snapshot-CURRENT.rules and snort-2.8.3.1
Any help on this would be greatly helpful. This is my first time setting up Snort and I still can't seem to figure it out. Plus I am new to Linux as well.


Reply With Quote
