Snort fails after rules update, what do I do?

To fix this, you will need to edit ’/usr/local/bin/snortrules.pl’

  • Login to IPCOP using putty or WinSCP (remember SSH on IPCOP is port 222 not 22)
  • Edit /usr/local/bin/snortrules.pl
  • Find
      my $rulesbranch="current";

      and replace with
      my $rulesbranch="2.6";
  • Save the file
  • You may have to wait 15 mn after a previous rules load to be allowed to load rules again
faq/using/snortupdate.txt · Last modified: 2008/09/21 01:41 by ds531