RE: snort and puresecure problem

[Omolayo Salako <OSalako () corp goamerica net>]

Thanks for your response, tried that it did not work. upon furthersnooping
around i startes snort with -T switch without specifying the interface and
like i expected it defaulted to eth0. so i tried same command again using -i
switch to specify the interface and it still defaulted to eth0 and gave a
Pcap error. this is very strange 

-----Original Message-----
From: Robin Brown [mailto:robin_brown () totalcomm com]
Sent: Wednesday, June 26, 2002 10:49 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] snort and puresecure problem


Hi,

Try removing or changing the the PID file in
usr/local/puresecure/sensor/run.  If snort is running put the current
PID in the file and restart psd.

-Robin



Message: 6
From: Omolayo Salako <OSalako () corp goamerica net>
To: snort-users () lists sourceforge net
Date: Mon, 24 Jun 2002 12:50:18 -0400
Subject: [Snort-users] snort and puresecure problem

i am running puresecure 1.6, i have couple of slave sensors logging into
a
central mysql database . The server that runs the master sensor also
runs
mysql, apache and a couple of slave sensors. altogether i have about 9
sensors logging to a central database. Things have been running fine for
about  4 months now. Recently i had to reboot one of the servers that
runs
the slave sensors, and since then i have been getting these errors on
all
sensors that runs on that server "snort error: error while trying to
start
snort" and when i check the server using ps i see that snort was not
running
but the the puresecure client deamon was, i have stopped and started the
deamon using psd options, but it has not  worked. when i start snort
independtly, ps shows it as running but for some reason it does not log
to
the database. my question is how do i fix this problem so that psd (
which
is the puresecure deamon process) starts snort as it's suppose too. Any
help
would be appreciated.



--__--__--

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-users


End of Snort-users Digest



-------------------------------------------------------
This sf.net email is sponsored by: Jabber Inc.
Don't miss the IM event of the season | Special offer for OSDN members! 
JabberConf 2002, Aug. 20-22, Keystone, CO http://www.jabberconf.com/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by: Jabber Inc.
Don't miss the IM event of the season | Special offer for OSDN members! 
JabberConf 2002, Aug. 20-22, Keystone, CO http://www.jabberconf.com/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users