LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   Snort Issue (https://www.linuxquestions.org/questions/linux-software-2/snort-issue-825107/)

ishi4u 08-09-2010 11:51 AM

Snort Issue
 
I am trying to install snort on Ubuntu 10.04 but facing following problem, can any one help me out?




Running in IDS mode

--== Initializing Snort ==--
Initializing Output Plugins!
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file "/usr/local/snort/etc/snort.conf"
PortVar 'HTTP_PORTS' defined : [ 80 311 591 593 901 1220 1414 2301 2381 2809 3128 3702 7777 7779 8000 8008 8028 8080 8118 8123 8180 8243 8280 8888 9443 9999 11371 ]
PortVar 'SHELLCODE_PORTS' defined : [ 0:79 81:65535 ]
PortVar 'ORACLE_PORTS' defined : [ 1024:65535 ]
PortVar 'SSH_PORTS' defined : [ 22 ]
Detection:
Search-Method = AC-Full-Q
Split Any/Any group = enabled
Search-Method-Optimizations = enabled
Maximum pattern length = 20
Tagged Packet Limit: 256
Loading dynamic engine /usr/local/snort/lib/snort_dynamicengine/libsf_engine.so... done
Loading all dynamic detection libs from /usr/local/snort/lib/snort_dynamicrules...
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/nntp.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/web-activex.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/bad-traffic.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/web-iis.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/multimedia.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/icmp.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/p2p.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/sql.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/chat.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/web-misc.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/imap.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/web-client.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/dos.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/misc.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/smtp.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/exploit.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/netbios.so... done
Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/pop3.so... done
Finished Loading all dynamic detection libs from /usr/local/snort/lib/snort_dynamicrules
Loading all dynamic preprocessor libs from /usr/local/snort/lib/snort_dynamicpreprocessor/...
Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dce2_preproc.so... done
Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_ssl_preproc.so... done
Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_ssh_preproc.so... done
Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dns_preproc.so... done
Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_smtp_preproc.so... done
Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so... done
Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dcerpc_preproc.so... done
Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_sdf_preproc.so... done
Finished Loading all dynamic preprocessor libs from /usr/local/snort/lib/snort_dynamicpreprocessor/
Log directory = /var/log/snort
Frag3 global config:
Max frags: 65536
Fragment memory cap: 4194304 bytes
Frag3 engine config:
Target-based policy: WINDOWS
Fragment timeout: 180 seconds
Fragment min_ttl: 1
Fragment Problems: 1
Overlap Limit: 10
Min fragment Length: 100
Stream5 global config:
Track TCP sessions: ACTIVE
Max TCP sessions: 8192
Memcap (for reassembly packet storage): 8388608
Track UDP sessions: ACTIVE
Max UDP sessions: 131072
Track ICMP sessions: INACTIVE
Log info if session memory consumption exceeds 1048576
Stream5 TCP Policy config:
Reassembly Policy: WINDOWS
Timeout: 180 seconds
Limit on TCP Overlaps: 10
Maximum number of bytes to queue per session: 1048576
Maximum number of segs to queue per session: 2621
Options:
Require 3-Way Handshake: YES
3-Way Handshake Timeout: 180
Detect Anomalies: YES
Reassembly Ports:
21 client (Footprint)
22 client (Footprint)
23 client (Footprint)
25 client (Footprint)
42 client (Footprint)
53 client (Footprint)
79 client (Footprint)
80 client (Footprint) server (Footprint)
109 client (Footprint)
110 client (Footprint)
111 client (Footprint)
113 client (Footprint)
119 client (Footprint)
135 client (Footprint)
136 client (Footprint)
137 client (Footprint)
139 client (Footprint)
143 client (Footprint)
161 client (Footprint)
311 client (Footprint) server (Footprint)
Stream5 UDP Policy config:
Timeout: 180 seconds
HttpInspect Config:
GLOBAL CONFIG
Max Pipeline Requests: 0
Inspection Type: STATELESS
Detect Proxy Usage: NO
IIS Unicode Map Filename: /usr/local/snort/etc/unicode.map
IIS Unicode Map Codepage: 1252
ERROR: /usr/local/snort/etc/snort.conf(218) => Invalid port number.
Fatal Error, Quitting..

AlucardZero 08-09-2010 12:21 PM

Invalid port number on line 218 of snort.conf.


All times are GMT -5. The time now is 01:07 AM.