Sign in to follow this  
Followers 0
KeRit

Testing the Snort configuration

5 posts in this topic

I'm installing WinSnort on a Windows Server 2012 R2 computer following your guide, but I got a error message at testing the configuration.
 
After I'd changed the Snort.conf file, I'm getting the error message you can see in the attached file WinIDS_Config_Error.JPG.
I checked the Snort.conf file, but I cann't find the error. Line 326 don't have a trailing white space.
 
 
Do you know what is causing the error?

snort.conf

WinIDS_Config_Error.JPG

Share this post


Link to post
Share on other sites

Thank you for the quick response!

With the new conf file I'm getting the same error!

 

Share this post


Link to post
Share on other sites

It appears that Sorcefire has added some items that will need additional configuring in the OS. For now edit the snort.conf to the below:

Original Line(s):

    decompress_swf { deflate lzma } \

Change to:

#   decompress_swf { deflate lzma } \

The decompression fault for SWF files requires an additional library (LZMA). I have made a request to the development team to look into this problem, and they are looking into it.

Share this post


Link to post
Share on other sites

I have done Configuring IIS for PHP, and the Windows Intrusion Detection Systems security console again but it didn't help. I missed the file fixit.vbs. Which packet contains this file?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0