RE: Re: Snort -T failure

["Uhte, Russ" <RussU () RP-L com>]

I'm running snort on a Windows 2000 machine using mysql and ACID.  What I
did was change my acid.conf line that from log to alert... that fixed my
problem with logging!!
-Russ

-----Original Message-----
From: LogicET () aol com [mailto:LogicET () aol com] 
Sent: Monday, August 26, 2002 11:08 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Re: Snort -T failure


I am having the same problem as you.  If you go to a directory that contains
the snort.conf file and run snort from there, it will initialize correctly.
When running snort from there it runs and logs correctly.  Can anyone tell
us why and how to allow snort to run when executed from any directory?

In a message dated 8/26/2002 11:39:43 AM Eastern Daylight Time,
snort-users-request () lists sourceforge net writes:




hello,

Yesterday I wrote because I had a problem with 'unicode'. I found out that I
installed the wrong version of snortrules. Now I installed
snort-1.8.7.tar.gz and snortrules.tar.gz following the manual Snort, MySQL,
Redhat 7.2. 
I tried the snort -T command again and got a new failure message: 

[root@localhost inprog]# snort -T
Log directory = /var/log/snort
Initializing Network Interface eth0
using config file /root/.snortrc
Initializing Preprocessors!
Initializing Plug-ins!
Initializating Output Plugins!
Parsing Rules file /root/.snortrc
+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
ERROR: Unable to open rules file: /root/.snortrc or /root//root/.snortrc
Fatal Error, Quitting.. 

I didn't found the .snortrc file on the redhat mashine. Why snort wants to
use the .snortrc file to inizialise and not the snort.conf file? What can I
do now to run snort?






---
CONFIDENTIALITY NOTICE: This email and any attachments are for the exclusive
and confidential use of the intended recipient. If you are not the intended
recipient, please do not read, distribute or take action in reliance upon
this message. If you have received this in error, please notify us
immediately by return email and promptly delete this message and its
attachments from your computer system.
---