Re: Snort Installed fine but daemon will not run

[Jimmy Ford <Jimmy.Ford () bloodntissue org>]

Looks like it's starting and running without quitting now. Before, it would stop and I wouldn't see a PID. I wanted 
eth1 to be promisc mode, I did ctrl+x or v I don't remember to get out.

Thank you,
Jimmy L Ford



-----Original Message-----
From: Jeremy Hoel [mailto:jthoel () gmail com]
Sent: Wednesday, August 22, 2012 3:17 PM
To: Jimmy Ford
Cc: Heine Lysemose; snort-users () lists sourceforge net
Subject: Re: Snort Installed fine but daemon will not run

When you started snort with the service command, you got a command
prompt back, correct? So you are not breaking/stopping the process to
view the log.

We can see that it starts at Aug 22 12:54:35 (And eth0 goes promisc)
but what happened here at Aug 22 12:54:35 to make eth0 go out of
promisc mode?

As soon as it starts do you see the pid that it lists with the process
in 'ps'? - ie:  snort[6933]  <--  6933 is the pid




Confidentiality Notice:  This e-mail message, including any attachments, is for the sole use of the intended 
recipient(s) and may contain confidential and privileged information.  Any unauthorized review, use, disclosure or 
distribution is prohibited.  If you are not the intended recipient, please contact the sender by reply e-mail and 
original message.

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!