Boas!
Instalei o snort 1.9.0; funcionou legal.
Agor instalei a versão 2.2.0, com libpcap 0.8.3, em um CL 8, mas dá pau, com a seguinte mensagem:
Log directory = /var/log/snort
Initializing Network Interface eth0
using config file ./snort.conf
Initializing Preprocessors!
Initializing Plug-ins!
Initializating Output Plugins!
Parsing Rules file ./snort.conf
+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
*WARNING*: unknown preprocessor "flow", ignoring!
No arguments to frag2 directive, setting defaults to:
Fragment timeout: 60 seconds
Fragment memory cap: 4194304 bytes
Stream4 config:
Stateful inspection: ACTIVE
Session statistics: INACTIVE
Session timeout: 30 seconds
Session memory cap: 8388608 bytes
State alerts: INACTIVE
Scan alerts: INACTIVE
Log Flushed Streams: INACTIVE
No arguments to stream4_reassemble, setting defaults:
Reassemble client: ACTIVE
Reassemble server: INACTIVE
Reassemble ports: 21 23 25 53 80 143 110 111 513
Reassembly alerts: ACTIVE
Reassembly method: FAVOR_OLD
*WARNING*: unknown preprocessor "http_inspect", ignoring!
*WARNING*: unknown preprocessor "http_inspect_server", ignoring!
Error: Unknown config: reference
Fatal Error, Quitting..
Alguém pode me ajudar?