RE: Snort-Running But not Logging....!!

["Slighter, Tim" <tslighter () itc nrcs usda gov>]

I know that I had problems when I did not create a directory /var/log/snort
and chmod at minimum 755 prior to doing the install.  This did fix the
problem for my particular issue on a Redhat 7.1 install

-----Original Message-----
From: McCammon, Keith [mailto:Keith.McCammon () eadvancemed com]
Sent: Monday, March 04, 2002 6:37 AM
To: kamesh_rajaram () sify com; snort-users () lists sourceforge net
Cc: DEMARC-Users () demarc org
Subject: RE: [Snort-users] Snort-Running But not Logging....!!


Not really familiar with Linux, but have you tried doing a touch on the
file?  Under some circumstances, I have to touch my alert file (using
FreeBSD) before Snort can write to it.  This usually happens when I'm
testing, and doing a lot of alert file deletion, etc.

Just a Monday morning thought...

-----Original Message-----
From: kamesh_rajaram () sify com [mailto:kamesh_rajaram () sify com]
Sent: Monday, March 04, 2002 2:48 AM
To: snort-users () lists sourceforge net
Cc: DEMARC-Users () demarc org
Subject: [Snort-users] Snort-Running But not Logging....!!


Hi Snort/Demarc Users....!!
        This is abt a strange behaviour of snort 1.8.3. I am using
DEMARC console to monitor in a Linux 7.0 server with 2 ethernet cards.
My problem is that snort is running, but not logging any of the packets
that come to the network. The ifconfig command shows that the packets
are being picked by the NIC. If i stop & restart it, it works fine. I am
unable to figure out the problem... Is there any log that tells me of
this kind of a problem...?? Or what can be done to solve this
problem......Any advice in this regard will be helpful...

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users