[outreachy] Error while running suricata-update

[Victor Julien]

On 12-03-19 18:15, Vidushi Agrawal via Outreachy wrote:
> Hi,
> I'm getting error while running suricata-update command. There's error
> opening suricata.yaml file. I looked up in the suricata-update
> documentation for a fix but I can't seem to figure out a fix. I'm
> getting following output:
> 
> 12/3/2019 -- 20:00:16 - <Info> -- Using data-directory
> /usr/local/var/lib/suricata.
> 12/3/2019 -- 20:00:16 - <Info> -- Found Suricata version 5.0.0-dev at
> /usr/local/bin/suricata.
> 12/3/2019 -- 20:00:16 - <Info> -- No sources configured, will use
> Emerging Threats Open
> 12/3/2019 -- 20:00:16 - <Info> -- Last download less than 15 minutes
> ago. Not downloading
> https://rules.emergingthreats.net/open/suricata-5.0.0/emerging.rules.tar.gz.
> 12/3/2019 -- 20:00:16 - <Warning> -- No distribution rule directory found.
> 12/3/2019 -- 20:00:19 - <Info> -- Loaded 26870 rules.
> 12/3/2019 -- 20:00:19 - <Info> -- Disabled 0 rules.
> 12/3/2019 -- 20:00:19 - <Info> -- Enabled 0 rules.
> 12/3/2019 -- 20:00:19 - <Info> -- Modified 0 rules.
> 12/3/2019 -- 20:00:19 - <Info> -- Dropped 0 rules.
> 12/3/2019 -- 20:00:19 - <Info> -- Enabled 188 rules for flowbit
> dependencies.
> 12/3/2019 -- 20:00:19 - <Info> -- Backing up current rules.
> 12/3/2019 -- 20:00:22 - <Info> -- Writing rules to
> /usr/local/var/lib/suricata/rules/suricata.rules: total: 26870; enabled:
> 19516; added: 11; removed 0; modified: 1223
> 12/3/2019 -- 20:00:22 - <Info> -- Testing with suricata -T.
> 12/3/2019 -- 20:00:22 - <*Error*> -- [ERRCODE: SC_ERR_FATAL(171)] -
> failed to open file: /usr/local/etc/suricata//suricata.yaml: No such
> file or directory
> 12/3/2019 -- 20:00:22 - <*Error*> -- Suricata test failed, aborting.
> 12/3/2019 -- 20:00:22 - <*Error*> -- Restoring previous rules.
> 
> Any help would be greatly appreciated. Thanks.

Did you run 'make install-conf' when installing Suricata itself?

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------