Skip to content

Instantly share code, notes, and snippets.

@shadowbq
Created April 27, 2012 18:49
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save shadowbq/2511784 to your computer and use it in GitHub Desktop.
Save shadowbq/2511784 to your computer and use it in GitHub Desktop.
snort 2.9.2.2 snort.conf patch for freebsd
--- snort.conf.orig 2012-03-19 18:57:09.000000000 -0400
+++ snort.conf 2012-04-27 14:41:23.000000000 -0400
@@ -101,17 +101,17 @@
# Path to your rules files (this can be a relative path)
# Note for Windows users: You are advised to make this an absolute path,
# such as: c:\snort\rules
-var RULE_PATH ../rules
-var SO_RULE_PATH ../so_rules
-var PREPROC_RULE_PATH ../preproc_rules
+var RULE_PATH ./rules
+var SO_RULE_PATH ./so_rules
+var PREPROC_RULE_PATH ./preproc_rules
# If you are using reputation preprocessor set these
# Currently there is a bug with relative paths, they are relative to where snort is
# not relative to snort.conf like the above variables
# This is completely inconsistent with how other vars work, BUG 89986
# Set the absolute path appropriately
-var WHITE_LIST_PATH ../rules
-var BLACK_LIST_PATH ../rules
+var WHITE_LIST_PATH ./rules
+var BLACK_LIST_PATH ./rules
###################################################
# Step #2: Configure the decoder. For more information, see README.decode
@shadowbq
Copy link
Author

WHITE_LIST & BLACK_LIST path variables are broken and should reflect the RULE_PATH

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment