Re: problem starting the sensor

[Matt Kettler <mkettler () evi-inc com>]

At 02:59 PM 8/31/2004, Juan Fernandez wrote:
> /usr/local/bin/snort -c /etc/snort/conf/snort.conf eth1 -u snort -g snort -D
>
>
>
> I didn't received any error massage but when I used ps to find snort I 
> received:
>
>
>
> root      1766  0.0  0.3  2472  720 ?        S    16:24   0:00 
> /snortinstall/syslog-ng-1.6.5/src/syslog-ng
>
> root      2110  0.0  0.3  4960  588 pts/0    S    18:04   0:00 grep snort
>
>
>
>
>
> meaning that snort isn't running can someone help please ?


Have you tried starting snort without the -D?

When you start snort interactively, instead of in daemon mode, you can see 
it complain about problems it encounters parsing your config, opening 
adapters, etc.

When starting in deamon mode, errors will be dumped to syslog if possible, 
but might not be sent anywhere if snort can't even open the logging device.






-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users