Logfile Problem

[kai.hanisch () philips com]

Hi all,

I've got a problem with the logfiles. In syslog it says: 

> May  7 06:25:06 debian snort: FATAL ERROR: ERROR in OpenAlertFile() => 
fopen() alert file /var/log/snort/alert: Permission denied

The strange thing is, snort actually DOES log to /var/log/snort/alert, but 
it seems to have problems writing to portscan.log, although it recreates 
the file every day...
This is how I am running snort:

> root     22330  0.3  4.5  7384 5720 ?        S    May03  20:18 
/usr/local/bin/snort -D -d -i eth0 -l /var/log/snort -h 130.143.147.0/22 
-c /root/rules/snort.conf

All files in /var/log/snort have permissions 600 and belong to root:root.

Thanks for any help

Kai