[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-devel
Subject:    Re: [Snort-devel] Fwd: [Snort-users] ERROR: 'debug-pkts' is an invalid option to the	'config ppm:' c
From:       Hui cao <huica () cisco ! com>
Date:       2014-10-01 21:12:08
Message-ID: 542C6E28.8080904 () cisco ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


If you want this option, you must build snort with debug enabled. You 
can add --enable-debug --enable-debug-msgs in ./configure before 
compiling snort.

*debug-pkts should be correct one. We will fix this issue in the future 
release.

*Best,
Hui.
On 10/01/2014 05:04 PM, Joel Esler (jesler) wrote:
> 
> 
> > Begin forwarded message:
> > 
> > *Date: *October 1, 2014 at 4:32:33 PM EDT
> > *From: *Jiahua Yu <yjh3207@gmail.com <mailto:yjh3207@gmail.com>>
> > *To: *<snort-users@lists.sourceforge.net 
> > <mailto:snort-users@lists.sourceforge.net>>
> > *Subject: **[Snort-users] ERROR: 'debug-pkts' is an invalid option to 
> > the 'config ppm:' configuration*
> > 
> > Hi,
> > 
> > I got this error while trying to use Packet Performance Monitoring 
> > with the *debug-pkts *option. Some typos exist in the User Manual in 
> > Chap 2.5.3 since both "debug-pkts" and "debug-pkt" appeared. I tried 
> > both but either one gets me the same error info.
> > 
> > My snort version is as below:
> > 
> > ,,_     -*> Snort! <*-
> > o"  )~   Version 2.9.6.0 GRE (Build 47)
> > ''''    By Martin Roesch & The Snort Team: 
> > http://www.snort.org/snort/snort-team 
> > <http://www.snort.org/snort/snort-team>
> > Copyright (C) 2014 Cisco and/or its affiliates. All rights 
> > reserved.
> > Copyright (C) 1998-2013 Sourcefire, Inc., et al.
> > Using libpcap version 1.5.3
> > Using PCRE version: 8.31 2012-07-06
> > Using ZLIB version: 1.2.8
> > 
> > Did anyone run into the same problem?
> > 
> > Thanks,
> > Jiahua
> > ------------------------------------------------------------------------------
> > Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
> > Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
> > Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
> > Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
> > http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk_______________________________________________
> >  Snort-users mailing list
> > Snort-users@lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> > 
> > Please visit http://blog.snort.org to stay current on all the latest 
> > Snort news!
> 
> 
> 
> ------------------------------------------------------------------------------
> Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
> Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
> Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
> Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
> http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk
> 
> 
> _______________________________________________
> Snort-devel mailing list
> Snort-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> Archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel
> 
> Please visit http://blog.snort.org for the latest news about Snort!


[Attachment #5 (text/html)]

<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    If you want this option, you must build snort with debug enabled.
    You can add --enable-debug --enable-debug-msgs in ./configure before
    compiling snort.<br>
    <br>
    <b class="">debug-pkts should be correct one. We will fix this issue
      in the future release.<br>
      <br>
    </b>Best,<br>
    Hui.<br>
    <div class="moz-cite-prefix">On 10/01/2014 05:04 PM, Joel Esler
      (jesler) wrote:<br>
    </div>
    <blockquote
      cite="mid:6EF1A5DA-BD09-49C5-91E1-9376DF46821A@cisco.com"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      <br class="">
      <div><br class="">
        <blockquote type="cite" class="">
          <div class="">Begin forwarded message:</div>
          <br class="Apple-interchange-newline">
          <div style="margin-top: 0px; margin-right: 0px; margin-bottom:
            0px; margin-left: 0px;" class="">
            <span style="font-family: -webkit-system-font, Helvetica
              Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"
              class=""><b class="">Date:
              </b></span><span style="font-family: -webkit-system-font,
              Helvetica Neue, Helvetica, sans-serif;" class="">October
              1, 2014 at 4:32:33 PM EDT<br class="">
            </span></div>
          <div style="margin-top: 0px; margin-right: 0px; margin-bottom:
            0px; margin-left: 0px;" class="">
            <span style="font-family: -webkit-system-font, Helvetica
              Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"
              class=""><b class="">From:
              </b></span><span style="font-family: -webkit-system-font,
              Helvetica Neue, Helvetica, sans-serif;" class="">Jiahua Yu
              &lt;<a moz-do-not-send="true"
                href="mailto:yjh3207@gmail.com" class="">yjh3207@gmail.com</a>&gt;<br
                class="">
            </span></div>
          <div style="margin-top: 0px; margin-right: 0px; margin-bottom:
            0px; margin-left: 0px;" class="">
            <span style="font-family: -webkit-system-font, Helvetica
              Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"
              class=""><b class="">To:
              </b></span><span style="font-family: -webkit-system-font,
              Helvetica Neue, Helvetica, sans-serif;" class="">&lt;<a
                moz-do-not-send="true"
                href="mailto:snort-users@lists.sourceforge.net" \
class="">snort-users@lists.sourceforge.net</a>&gt;<br  class="">
            </span></div>
          <div style="margin-top: 0px; margin-right: 0px; margin-bottom:
            0px; margin-left: 0px;" class="">
            <span style="font-family: -webkit-system-font, Helvetica
              Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"
              class=""><b class="">Subject:
              </b></span><span style="font-family: -webkit-system-font,
              Helvetica Neue, Helvetica, sans-serif;" class=""><b
                class="">[Snort-users] ERROR: 'debug-pkts' is an invalid
                option to the 'config ppm:' configuration</b><br
                class="">
            </span></div>
          <br class="">
          <div class="">
            <div dir="ltr" class="">Hi,
              <div class=""><br class="">
              </div>
              <div class="">I got this error while trying to use Packet
                Performance Monitoring with the
                <b class="">debug-pkts </b>option. Some typos exist in
                the User Manual in Chap 2.5.3 since both "debug-pkts"
                and "debug-pkt" appeared. I tried both but either one
                gets me the same error info.</div>
              <div class=""><br class="">
              </div>
              <div class="">My snort version is as below:</div>
              <div class=""><br class="">
              </div>
              <div class="">
                <div class="">   ,,_     -*&gt; Snort! &lt;*-</div>
                <div class="">  o"  )~   Version 2.9.6.0 GRE (Build 47) </div>
                <div class="">   ''''    By Martin Roesch &amp; The
                  Snort Team: <a moz-do-not-send="true"
                    href="http://www.snort.org/snort/snort-team"
                    class="">
                    http://www.snort.org/snort/snort-team</a></div>
                <div class="">           Copyright (C) 2014 Cisco and/or
                  its affiliates. All rights reserved.</div>
                <div class="">           Copyright (C) 1998-2013
                  Sourcefire, Inc., et al.</div>
                <div class="">           Using libpcap version 1.5.3</div>
                <div class="">           Using PCRE version: 8.31
                  2012-07-06</div>
                <div class="">           Using ZLIB version: 1.2.8</div>
              </div>
              <div class=""><br class="">
              </div>
              <div class="">Did anyone run into the same problem? </div>
              <div class=""><br class="">
              </div>
              <div class="">Thanks,</div>
              <div class="">Jiahua</div>
            </div>
------------------------------------------------------------------------------<br
              class="">
            Meet PCI DSS 3.0 Compliance Requirements with EventLog
            Analyzer<br class="">
            Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI
            DSS Reports<br class="">
            Are you Audit-Ready for PCI DSS 3.0 Compliance? Download
            White paper<br class="">
            Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog
            Analyzer<br class="">
            <a moz-do-not-send="true"
href="http://pubads.g.doubleclick.net/gampad/clk?id=154622311&amp;iu=/4140/ostg.clktrk_______________________________________________"
                
              class="">http://pubads.g.doubleclick.net/gampad/clk?id=154622311&amp;iu=/4140/ostg.clktrk_______________________________________________</a><br
  class="">
            Snort-users mailing list<br class="">
            <a class="moz-txt-link-abbreviated" \
href="mailto:Snort-users@lists.sourceforge.net">Snort-users@lists.sourceforge.net</a><br \
class="">  Go to this URL to change user options or unsubscribe:<br
              class="">
            <a class="moz-txt-link-freetext" \
href="https://lists.sourceforge.net/lists/listinfo/snort-users">https://lists.sourceforge.net/lists/listinfo/snort-users</a><br
  class="">
            Snort-users list archive:<br class="">
<a class="moz-txt-link-freetext" \
href="http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users">http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users</a><br
  class="">
            <br class="">
            Please visit <a class="moz-txt-link-freetext" \
href="http://blog.snort.org">http://blog.snort.org</a> to stay current on all  the \
latest Snort news!</div>  </blockquote>
      </div>
      <br class="">
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">------------------------------------------------------------------------------
 Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
<a class="moz-txt-link-freetext" \
href="http://pubads.g.doubleclick.net/gampad/clk?id=154622311&amp;iu=/4140/ostg.clktrk \
">http://pubads.g.doubleclick.net/gampad/clk?id=154622311&amp;iu=/4140/ostg.clktrk</a></pre>
  <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Snort-devel mailing list
<a class="moz-txt-link-abbreviated" \
href="mailto:Snort-devel@lists.sourceforge.net">Snort-devel@lists.sourceforge.net</a> \
<a class="moz-txt-link-freetext" \
href="https://lists.sourceforge.net/lists/listinfo/snort-devel">https://lists.sourceforge.net/lists/listinfo/snort-devel</a>
 Archive:
<a class="moz-txt-link-freetext" \
href="http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel">http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel</a>


Please visit <a class="moz-txt-link-freetext" \
href="http://blog.snort.org">http://blog.snort.org</a> for the latest news about \
Snort!</pre>  </blockquote>
    <br>
  </body>
</html>



------------------------------------------------------------------------------
Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk

_______________________________________________
Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic