RE: Problems starting snort, yet again.

["C. Bensend" <benny () bennyvision com>]

On Tue, 17 Jul 2001, Bill Gercken wrote:

> snort -Afull -g snort -u snort -t /home/snort -c snort.conf
>
> that will reveal more messages. Once, the errors are cleaned up, try adding
> the -D.

Excellent hint, Bill.  Thanks much.  Doing this reports:

ERROR in OpenAlertFile() => fopen() alert file /var/log/snort/alert:
Permission denied
Fatal Error, Quitting..

Yet another DOH! for me...  After adjusting the permissions
on /var/log/snort in the chroot, it starts fine.  Could this
be added to the FAQ?  I did check it before posting, as well
as the archives...

On a more design-oriented front, shouldn't this have been
logged _somewhere_, when using the '-D' switch?  I checked
every log I could think of, and could not find any reference
to the reason snort wouldn't start.  Even the -T switch didn't
help.

Thanks very much.  :)

Benny


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"I find your lack of clue...disturbing" - Sysadmin Vader.
- Quote from a .sig file, on the MailMan users mailing list



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users