CODEWITHSUNDEEP
linuxsnort
JG4
JG4

Reputation: 131

Snort Message - WARNING: No preprocessors configured for policy 0

I have installed and configured snort 2.9.7.2 and it is running without a problem. However, my question is: what does the following warning mean?

"No preprocessors configured for policy 0"

This message shows when I run the command:

snort -v

Upvotes: 12

Views: 56009

Answers (4)

Abdul R Farouk
Abdul R Farouk

Reputation: 1

You must enable the snort preprocessors:

snort -v -c /etc/snort/snort.conf

Make sure snort.conf has all your preprocessors enabled.

Upvotes: 0

Arun Kaushal
Arun Kaushal

Reputation: 631

This message indicates that no snort preprocessor is loaded. In order to get rid of this warning, please use the following command:

snort -v -c /etc/snort/snort.conf

Please make sure that the configuration file /etc/snort/snort.conf is present and preprocessors are enabled in the configuration file.

Upvotes: 11

William A
William A

Reputation: 11

I had the same error:

No preprocessors configured for policy 0

That was because I forgot to unpack all the rules into the proper folders. After unpacking the rules, the error went away.

Upvotes: 1

DXH30
DXH30

Reputation: 11

Check if it is enabled and see if it has any sid or msg with:

snort -A console -c /etc/snort/snort.conf

And check if any of the preprocessors are sending alerts if not you should recompile it.

Upvotes: 0

Related Questions