| Author |
Message |
Hith |
|
Post subject: No BASE logging
Posted: Jan 19, 2007 - 01:39 PM
|
|

Joined: Jan 19, 2007
Posts: 2
Status: Offline
|
|
|
|
|
 |
Morpheus |
|
Post subject: RE: No BASE logging
Posted: Jan 19, 2007 - 08:09 PM
|
|
Site Admin

Joined: Sep 04, 2003
East Coast - USA
Posts: 1463
Location: East Coast - USA
Status: Offline
|
|
|
|
|
 |
Hith |
|
Post subject:
Posted: Jan 20, 2007 - 06:06 AM
|
|

Joined: Jan 19, 2007
Posts: 2
Status: Offline
|
|
Son of a gun, I'm sorry I wasted your time.
I'm sure I'll be back later, with plenty of n00b-type questions. I think, in the snort.conf file, the "\" symbol at the end of a line is a sort of "no halt on errors" thing.
I was adding that to every line of the config that was giving me problems.
By the way, a great tool to edit these config files is a tool called textpad. You can view line numbers, which makes it very easy to see exacly where the config file is causing problems.
Of course, if you're an experimenting fool, like myself, you'll find yourself in deep trouble, and need to start from scratch.
Until later today (I'm sure of it).
-Cheers! |
|
|
| |
|
|
|
 |
Morpheus |
|
Post subject:
Posted: Jan 20, 2007 - 06:17 AM
|
|
Site Admin

Joined: Sep 04, 2003
East Coast - USA
Posts: 1463
Location: East Coast - USA
Status: Offline
|
|
Thats a UNIX discreptor telling the script to process the next line. Snort will handle these. You could actually remove all the back slashes but you would need to move the next line up.
Example:
This is a test on /
snort.
If the back slash was removed the line would need to be:
This is a test on snort. |
_________________ Best regards,
Morpheus...
WINSNORT.com Management
|
| |
|
|
|
 |
justin0469 |
|
Post subject:
Posted: Aug 26, 2007 - 09:43 AM
|
|

Joined: Aug 26, 2007
Posts: 2
Status: Offline
|
|
| I was having the same issue. I went to the link Morpheus provided and the test rules showed alerts on BASE. So I am assuming that means all is good, just there are no alerts to show using the normal rules? |
|
|
| |
|
|
|
 |
|
|