Snort mailing list archives

RE: Snort is exiting after start


From: "Jerry Shenk" <jshenk () decommunications com>
Date: Tue, 2 Mar 2004 10:37:17 -0500

Start snort and tail the log.  You should get some indications from
that.  

Something like '/usr/local/etc/rc.d/snortd ; tail /var/log/messages -f'
should work.  You're gonna have to change the location of the syslog
file on FreeBSD but I think you get the idea.

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Daniel
Jagodziñski
Sent: Monday, March 01, 2004 5:47 PM
To: SNORT_USER_MAILING_LIST
Subject: [Snort-users] Snort is exiting after start


I am starting snort from shell script located in /usr/local/etc/rc.d
with the starting line like that
.../snort -c /usr/local/etc/snort.conf -u snortd -g snortd -i rl0 -D

user and group snortd exist. Snort is configured to use PostgreSQL and
the
database is present.

The scripts is executed but just a while after snort is extiting with
information Promisc... mode disabled.

What is that I am doing wrong. Earlier I have the same starting line
placed
in /etc/rc.local but following suggestions of FreeBSD users moved it
into
script. When started from rc.local the snort was working.
I have tried however to start it from the shell with similar results.
Even
if executed as root won't start

System: FreeBSD 5.1, PostgreSQL 7.4.1, Snort 2.1.1

Jan Pips



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id56&alloc_id438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: