Snort mailing list archives
Re: snort dead but subsys locked error
From: Peter Bates <peter.bates () ucl ac uk>
Date: Mon, 23 Sep 2013 15:30:56 +0100
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello all On 23/09/2013 15:02, Hanson.Webster () salemfive com wrote:
If I run snort -c /usr/local/snort/etc/snort.conf -T to test the configuration, it comes back OK: Snort successfully validated the configuration! Snort exiting
Does the -T run okay if you specify an actual interface? snort -i ethX -c /usr/local/snort/etc/snort.conf -T I believe a change at some point menas that you have to specify a capture interface to perform a proper test otherwise it defaults to just demonstrating pcap-read mode (I think?). - -- Peter Bates Senior Information Security Officer Phone: +44(0)2076792049 Information Services Division Internal Ext: 32049 University College London London WC1E 6BT -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJSQFCgAAoJELhVoVpEMS6RDp0H/jfNAqc9deFsR4uP8zQNI1HB mr289VUCKkwLTDRUDWmxrxdx8OXNeYx5LK6X749VZWlBsGiDuqpY8NuQ8wRn31Ne cL2l+apoD4qGQsNn7T+79rmCBd1O6fxVzkFgJY3dN8a4UdannpWuSxPw5eATQmrt n3FOhq8sOIqPxhqOV/oWOKbUbKb/NyOpWyn4xxyl493s/Kgi9LGYMgGJOpzGGiBy +IFymw4TV7BneQ361uXImnCG1p/ImWCZdnV1bGn+K1p1LcEs/Jrf5vtfHDe4MRc9 dBmt7Ni8ilLc5lydjGD7e+DzgZR3wHdznN6Q3JIKRse7+bKSEvXJY69Oo8FLe1A= =nc5t -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99! 1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint 2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13. http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- snort dead but subsys locked error Hanson.Webster (Sep 23)
- Re: snort dead but subsys locked error James Lay (Sep 23)
- Re: snort dead but subsys locked error Peter Bates (Sep 23)
- Message not available
- Re: snort dead but subsys locked error Peter Bates (Sep 23)
- Message not available