[Oisf-users] next silly question: error parsing rules

[Victor Julien]

On 07/27/2012 02:33 AM, Russell Fulton wrote:
> when I try and run it with -D I get:
> 
> [rful011 at nevil-res4 ~]$ sudo /usr/local/suricata/bin/suricata -D -c /usr/local/suricata/etc/suricata.yaml
> 27/7/2012 -- 12:18:34 - <Info> - This is Suricata version 1.3 RELEASE
> 27/7/2012 -- 12:18:34 - <Info> - CPUs/cores online: 4
> Suricata 1.3
> USAGE: /usr/local/suricata/bin/suricata
> 
> 	-c <path>                    : path to configuration file
> .
> .
> .
> 
> nothing in /var/log/messages or /var/log/suricata/*
> 
> Is it just the warning which is stopping suri starting?

You need to tell Suri to do something, like -i eth0 to read packets from
eth0 using libpcap.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------