Snort Issue
I am trying to install snort on Ubuntu 10.04 but facing following problem, can any one help me out?
Running in IDS mode --== Initializing Snort ==-- Initializing Output Plugins! Initializing Preprocessors! Initializing Plug-ins! Parsing Rules file "/usr/local/snort/etc/snort.conf" PortVar 'HTTP_PORTS' defined : [ 80 311 591 593 901 1220 1414 2301 2381 2809 3128 3702 7777 7779 8000 8008 8028 8080 8118 8123 8180 8243 8280 8888 9443 9999 11371 ] PortVar 'SHELLCODE_PORTS' defined : [ 0:79 81:65535 ] PortVar 'ORACLE_PORTS' defined : [ 1024:65535 ] PortVar 'SSH_PORTS' defined : [ 22 ] Detection: Search-Method = AC-Full-Q Split Any/Any group = enabled Search-Method-Optimizations = enabled Maximum pattern length = 20 Tagged Packet Limit: 256 Loading dynamic engine /usr/local/snort/lib/snort_dynamicengine/libsf_engine.so... done Loading all dynamic detection libs from /usr/local/snort/lib/snort_dynamicrules... Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/nntp.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/web-activex.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/bad-traffic.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/web-iis.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/multimedia.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/icmp.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/p2p.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/sql.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/chat.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/web-misc.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/imap.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/web-client.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/dos.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/misc.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/smtp.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/exploit.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/netbios.so... done Loading dynamic detection library /usr/local/snort/lib/snort_dynamicrules/pop3.so... done Finished Loading all dynamic detection libs from /usr/local/snort/lib/snort_dynamicrules Loading all dynamic preprocessor libs from /usr/local/snort/lib/snort_dynamicpreprocessor/... Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dce2_preproc.so... done Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_ssl_preproc.so... done Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_ssh_preproc.so... done Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dns_preproc.so... done Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_smtp_preproc.so... done Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so... done Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_dcerpc_preproc.so... done Loading dynamic preprocessor library /usr/local/snort/lib/snort_dynamicpreprocessor//libsf_sdf_preproc.so... done Finished Loading all dynamic preprocessor libs from /usr/local/snort/lib/snort_dynamicpreprocessor/ Log directory = /var/log/snort Frag3 global config: Max frags: 65536 Fragment memory cap: 4194304 bytes Frag3 engine config: Target-based policy: WINDOWS Fragment timeout: 180 seconds Fragment min_ttl: 1 Fragment Problems: 1 Overlap Limit: 10 Min fragment Length: 100 Stream5 global config: Track TCP sessions: ACTIVE Max TCP sessions: 8192 Memcap (for reassembly packet storage): 8388608 Track UDP sessions: ACTIVE Max UDP sessions: 131072 Track ICMP sessions: INACTIVE Log info if session memory consumption exceeds 1048576 Stream5 TCP Policy config: Reassembly Policy: WINDOWS Timeout: 180 seconds Limit on TCP Overlaps: 10 Maximum number of bytes to queue per session: 1048576 Maximum number of segs to queue per session: 2621 Options: Require 3-Way Handshake: YES 3-Way Handshake Timeout: 180 Detect Anomalies: YES Reassembly Ports: 21 client (Footprint) 22 client (Footprint) 23 client (Footprint) 25 client (Footprint) 42 client (Footprint) 53 client (Footprint) 79 client (Footprint) 80 client (Footprint) server (Footprint) 109 client (Footprint) 110 client (Footprint) 111 client (Footprint) 113 client (Footprint) 119 client (Footprint) 135 client (Footprint) 136 client (Footprint) 137 client (Footprint) 139 client (Footprint) 143 client (Footprint) 161 client (Footprint) 311 client (Footprint) server (Footprint) Stream5 UDP Policy config: Timeout: 180 seconds HttpInspect Config: GLOBAL CONFIG Max Pipeline Requests: 0 Inspection Type: STATELESS Detect Proxy Usage: NO IIS Unicode Map Filename: /usr/local/snort/etc/unicode.map IIS Unicode Map Codepage: 1252 ERROR: /usr/local/snort/etc/snort.conf(218) => Invalid port number. Fatal Error, Quitting.. |
Invalid port number on line 218 of snort.conf.
|
All times are GMT -5. The time now is 01:07 AM. |