Snort mailing list archives
RE: Snort-Running But not Logging....!!
From: "McCammon, Keith" <Keith.McCammon () eadvancemed com>
Date: Mon, 4 Mar 2002 09:37:00 -0500
Not really familiar with Linux, but have you tried doing a touch on the file? Under some circumstances, I have to touch my alert file (using FreeBSD) before Snort can write to it. This usually happens when I'm testing, and doing a lot of alert file deletion, etc. Just a Monday morning thought... -----Original Message----- From: kamesh_rajaram () sify com [mailto:kamesh_rajaram () sify com] Sent: Monday, March 04, 2002 2:48 AM To: snort-users () lists sourceforge net Cc: DEMARC-Users () demarc org Subject: [Snort-users] Snort-Running But not Logging....!! Hi Snort/Demarc Users....!! This is abt a strange behaviour of snort 1.8.3. I am using DEMARC console to monitor in a Linux 7.0 server with 2 ethernet cards. My problem is that snort is running, but not logging any of the packets that come to the network. The ifconfig command shows that the packets are being picked by the NIC. If i stop & restart it, it works fine. I am unable to figure out the problem... Is there any log that tells me of this kind of a problem...?? Or what can be done to solve this problem......Any advice in this regard will be helpful... _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort-Running But not Logging....!! kamesh_rajaram (Mar 03)
- Re: Snort-Running But not Logging....!! John Sage (Mar 04)
- <Possible follow-ups>
- RE: Snort-Running But not Logging....!! McCammon, Keith (Mar 04)
- RE: Snort-Running But not Logging....!! Slighter, Tim (Mar 04)