I tried snort in openwrt but its not working. Its giving error.
opkg install snort
and configured . I added "
include community.rules" too.
and at last executed
snort -c "snort.conf" -i "lo" --daq-dir /usr/lib/daq
and it showed this error.
HttpInspect Config: GLOBAL CONFIG Detect Proxy Usage: NO IIS Unicode Map Filename: ./unicode.map IIS Unicode Map Codepage: 1252 Memcap used for logging URI and Hostname: 150994944 Max Gzip Memory: 838860 Max Gzip Sessions: 2688 Gzip Compress Depth: 65535 Gzip Decompress Depth: 65535 ERROR: snort.conf(326) => Invalid keyword '}' for server configuration. Fatal Error, Quitting.. root@OpenWrt:/etc/snort#
Any help would be appreciated..
Thanking you in advance.