[Snort-inline-users] Re: snortconfig create empty rule files

[Pawel C. <pc...@ui...>]

We have run into the same problem, but after upgrading to the newest version
of Perl snortconfig works fine

Pawel Czarnota
ACM Honeynet Project
http://www.cs.uic.edu/~pczarno1

      From: Kris Lindgren <kidkl@ho...>
       snortconfig create empty rule files
      2004-02-29 00:47
 Hello list,

 After finally getting snortconfig to work I have run into a problem.  All
 the rule files that it creates are empty. Using command:
./snortconfig -file
 asdf.conf -config examples/HONEYNET.config -verbose -honeynet -inline
 asdf.conf:
 var RULE_PATH /etc/snort
 include $RULE_PATH/exploit.rules
 include $RULE_PATH/finger.rules
 include $RULE_PATH/ftp.rules
 include $RULE_PATH/telnet.rules
 include $RULE_PATH/rpc.rules
 include $RULE_PATH/rservices.rules
 include $RULE_PATH/dos.rules
 include $RULE_PATH/ddos.rules
 include $RULE_PATH/dns.rules
 include $RULE_PATH/tftp.rules
 include $RULE_PATH/web-cgi.rules
 include $RULE_PATH/web-coldfusion.rules
 include $RULE_PATH/web-iis.rules
 include $RULE_PATH/web-frontpage.rules
 include $RULE_PATH/web-misc.rules
 include $RULE_PATH/web-client.rules
 include $RULE_PATH/web-php.rules
 include $RULE_PATH/sql.rules
 include $RULE_PATH/x11.rules
 include $RULE_PATH/icmp.rules
 include $RULE_PATH/netbios.rules
 include $RULE_PATH/oracle.rules
 include $RULE_PATH/mysql.rules
 include $RULE_PATH/snmp.rules
 include $RULE_PATH/smtp.rules
 include $RULE_PATH/imap.rules
 include $RULE_PATH/pop3.rules
 include $RULE_PATH/pop2.rules
 include $RULE_PATH/web-attacks.rules
 include $RULE_PATH/virus.rules
 include $RULE_PATH/nntp.rules

 Output from snortconfig with -verboseTried adding replace to 312.  No
 contents
 Did not switch 1382.  Doesn't use variables.
 Did not switch 271.  Doesn't use variables.
 Did not switch 224.  Doesn't use variables.
 Did not switch 1941.  Doesn't use variables.
 Did not switch 2337.  Doesn't use variables.
 Did not switch 1289.  Doesn't use variables.
 Did not switch 1441.  Doesn't use variables.
 Did not switch 1442.  Doesn't use variables.
 Did not switch 1443.  Doesn't use variables.
 Did not switch 485.  Doesn't use variables.
 Did not switch 486.  Doesn't use variables.
 Did not switch 487.  Doesn't use variables.
 Did not switch 2311.  Doesn't use variables.
 Did not switch 2348.  Doesn't use variables.
 Did not switch 2349.  Doesn't use variables.
 Did not switch 1415.  Doesn't use variables.
 Did not switch 1416.  Doesn't use variables.
 Did not switch 732.  Doesn't use variables.

 perl -MNet::Snort::Parser::Rule -e 'print
 $Net::Snort::Parser::Rule::VERSION."\n";'
 gives 1.14 i've tried to get all the latest files from cvs but the same
 problem still exhists.

 Perl version is 5.8.0.

 Any help would be great.

 _________________________________________________________________
 Stay informed on Election 2004 and the race to Super Tuesday.
 http://special.msn.com/msn/election2004.armx