Errors that don't cause problems / Problems without error message

[kai.hanisch () philips com]

Hi there,

I have snort 1.8.6 running on debian woody with 2.4.19pre9, and snort is 
behaving strange. In syslog it says:

> FATAL ERROR: ERROR: Unable to open rules file:$PATH/snort.conf or 
$PATH//$PATH/snort.conf

which cannot be true as snort runs and logging works fine. The error 
occurs every morning when cron.daily is running.

This is just a matter of interest, but what really disturbs me is that 
portscans are not being logged. Though /var/log/snort/portscan.log is 
created, nothing is logged there (Configuration in snort.conf says: 
"preprocessor portscan: $HOME_NET 4 3 portscan.log"). I have 644 
permissions on alert and portscan.log, owner ist root:snort.

Any help would be greatly appreciated.

Kai




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Stuff, things, and much much more.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users