RE: non-root user cannot run snort

["Grime, Richard S" <richard.grime () imperial ac uk>]

Usually only root users have permission to open PCAP devices.  Try
running snort as root, but use the -u option to specify "bob", which
will run snort as bob after it's initialized.

snort ... -u bob

(as far as I know...)

> I want to run Snort as some other user than root. Unfortunately, I
only
> have success as root. As a normal user "bob", this is what happens:
>
>  bob@sonic:~> snort -dev -l ./log
>  Running in packet logging mode
>  Log directory = ./log
>
>  Initializing Network Interface eth0
>  ERROR: OpenPcap() device eth0 open: 
>        socket: Operation not permitted
>  Fatal Error, Quitting..


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users