My /var/log/messages says that snort couldn't be started because
Code:
FATAL ERROR: Unable to open rules file: /etc/local.rules or /etc/snort//etc/local.rules
The file seems to be missing. Where is that file? Is it even supposed to exist, or should I somehow create that file myself?
Hybrid Mode
