[Oisf-users] assistance with suricata-update and no rules found

[Jeff Dyke]

oh F, that was embarrassing.  Thank you /facepalm

On Thu, Feb 21, 2019 at 11:30 AM Jason Ish <jason.ish at oisf.net> wrote:

> Hi Jeff,
>
> On 2019-02-21 10:26 a.m., Jeff Dyke wrote:
> > I've been using oinkmaster to update suricata rules for the last few
> > years (before suricata-update).  I'm going through the process of
> > migrating and am almost there, but get these warnings on start up:
> >
> > 21/2/2019 -- 16:10:36 - <Warning> - [ERRCODE: SC_ERR_NO_RULES(42)] - No
> > rule files match the pattern /var/lib/suricata/rules/suricata.rules
> > 21/2/2019 -- 16:10:36 - <Warning> - [ERRCODE:
> > SC_ERR_NO_RULES_LOADED(43)] - 1 rule files specified, but no rule was
> > loaded at all!
> >
> > $> wc -l /var/lib/suricata/rules/suricata.rules
> > 27012 /var/lib/suricata/rules/suricata.rules
>
> The first thing I'd check is the permissions.  Can the user suricata is
> running as open all the directories and the rule file?
>
> Jason
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>
> Conference: https://suricon.net
> Trainings: https://suricata-ids.org/training/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20190221/01c3f3b9/attachment.html>