Package: snort-common Version: 2.8.5.2-9 Severity: wishlist I guess I've had a misconfigured snort-pgsql for a while, but as I hadn't been reading the logs on a regular basis, I missed it.
I ran snort -T and got a fatal error about the use of the negation operator with 'any' on line 19 of community-virus.rules. It seems the cause of this being a fatal error, is that $HOME_NET is empty. https://www.alienvault.com/forum/index.php?t=msg&goto=4348&S=dc28fb318c691e055eb39c39c0577980 Putting the IP of my LAN in $HOME_NET at least gets if the fatal error from snort -T. I don't see any bugs related to this, nor files in /usr/share/doc/snort-*/*Debian* which mention this. -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.32 (SMP w/2 CPU cores) Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages snort-common depends on: ii adduser 3.112+nmu2 add and remove users and groups ii debconf [debconf-2.0] 1.5.39 Debian configuration management sy ii lsb-base 3.2-27 Linux Standard Base 3.2 init scrip ii perl-modules 5.10.1-20 Core Perl modules snort-common recommends no packages. Versions of packages snort-common suggests: pn snort-doc <none> (no description available) -- Configuration Files: /etc/snort/snort.conf [Errno 13] Permission denied: u'/etc/snort/snort.conf' -- debconf information: snort/deprecated_config: snort/config_error: -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org