Snort mailing list archives

Re: restart code error RH 7.1


From: Chris Green <cmg () uab edu>
Date: Tue, 27 Nov 2001 13:37:45 -0600

"Madhav Diwan" <mdiwan () wagweb com> writes:


but then again :  so does this :


/usr/sbin/snort-plain -A fast -b -l /var/log/snort -d -i eth0 -c
/etc/snort/snort.conf -D

 note i have two binaries snort-plain and snort-mysql in /usr/sbin


Here is the problem !!!

So the symlink was missing and/or broken.. hrm.


WARNING : if you installed snort 1.8.1-current via tarball it places the
snort binary in /usr/bin/ and the SNORTD file calls only "snort" .. not
"snort-plain" or "snort-WHATEVER" .

 you must manually edit the snortd file to call the particular binary
instlled by the rpm you want to use... Note edit  both the start and
stop cases

Well, the rpm is supposed to fix the symlinks correctly but in the new
soon to be released packages, I do believe I made a symlink fix that
should always be executed.

There should be a symlink from /usr/sbin/snort -> /usr/sbin/snort-mysql 
-- 
Chris Green <cmg () uab edu>
This is my signature. There are many like it but this one is mine.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: