问题
I have installed and configured snort 2.9.7.2 and it is running without a problem. However, my question is: what does the following warning mean?
"No preprocessors configured for policy 0"
This message shows when I run the command:
snort -v
回答1:
This message indicates that no snort preprocessor is loaded. In order to get rid of this warning, please use the command: snort -v -c /etc/snort/snort.conf
Please make sure that the configuration file /etc/snort/snort.conf is present and preprocessors are enabled in the configuration file.
回答2:
Check if it is enabled and send if it has any sid msg with snort -A console -c /etc/snort/snort.conf And check if any of the preprocessor is sending any alert if itsnt you should recompile it.
回答3:
You must enable the snort processors:
snort -v -c /etc/snort/snort.conf
Make sure snort.conf has all your processors enabled that you want.
来源：https://stackoverflow.com/questions/29503344/snort-message-warning-no-preprocessors-configured-for-policy-0