Re: Error? Failed to open local.rules

["Joel Esler" <eslerj () gmail com>]

Actually that doesn't really matter.  I would check if the user you are
trying to run Snort as has access to the /var/run directory.  Then, does the
snort_eth1.pid file exist?  If it does, and Snort's not running, you
probably want to nuke the file.

J

On Mon, Nov 3, 2008 at 6:45 AM, Manuel Gómez <mgdpz1 () gmail com> wrote:

> Thank you very much, but now i am in the step of create a mysql database
> and i am confused:
>
> Nov  3 12:39:03 SATELVL snort[6398]: PID path stat checked out ok, PID path
> set to /var/run/
> Nov  3 12:39:03 SATELVL snort[6398]: FATAL ERROR: Failed to Lock PID File
> "/var/run//snort_eth1.pid" for PID "6398"
> Nov  3 12:39:04 SATELVL snort[6372]: Child exited unexpectedly
> Nov  3 12:39:04 SATELVL snort[6372]: Daemon parent exiting
>
> I see that "/var/run//snort_eth1.pid" should be wrong, it would be
> "/var/run/snort_eth1.pid" but i don't know where is the configuration file.
>
> Somebody knows where is?
>
> 2008/11/3 Matt Olney <molney () sourcefire com>
>
> Manuel...a little information as to what you've tried so far would help...
> > Do the files exist?
> > Does the user that you are trying to launch snort with have rights to the
> > files?
> >
> > Most likely the problem is that the local.rules file doesn't exist, as
> > that is where you put the rules YOU write.  If you haven't written any
> > rules, you should comment out the local.rules include near hte bottom
> > of your snort.conf.
> >
> > Matt
> >
> > On Sun, Nov 2, 2008 at 8:29 PM, Manuel Gómez <mgdpz1 () gmail com> wrote:
> > > Nov  3 00:40:58 SATELVL snort[22920]: FATAL ERROR: Unable to open rules
> > > file: etc/snort/rules/local.rules or
> > /etc/snort/etc/snort/rules/local.rules
> > > I have followed the guide for Debian set by step, and the last one
> > worked.
> > > What happens?
> > >
> > > Thank you very much.
> > -------------------------------------------------------------------------
> > > This SF.Net email is sponsored by the Moblin Your Move Developer's
> > challenge
> > > Build the coolest Linux based applications with Moblin SDK & win great
> > > prizes
> > > Grand prize is a trip for two to an Open Source event anywhere in the
> > world
> > > http://moblin-contest.org/redirect.php?banner_id=100&url=/
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists sourceforge net
> > > Go to this URL to change user options or unsubscribe:
> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's
> challenge
> Build the coolest Linux based applications with Moblin SDK & win great
> prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users<https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users>list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users