Snort mailing list archives

RE: More snort problems - I cant find snort.conf


From: Francesca Milanini <francesca.milanini () fastwebnet it>
Date: 09 Jul 2002 16:17:53 +0200

Hello, I have got this problem today. I use Debian. 
Try to install snort-common! 
I don't know why, but today I found my "snort.conf", only after
installing "snort-common" too. 
Francesca

On Tue, 2002-07-09 at 15:34, McCammon, Keith wrote:
Well, first of all, you're much better off downloading snort and installing from the source code.

1) Download from www.snort.org, gunzip snort.tar.gz, tar -xf snort.tar, and you're left with a directory containing 
the source.

2) Move it to /usr/local, or wherever you want.

3) Change to the source directory, and do ./configure, make, make install.  This is also in the USAGE file.

4) Install done.  Now create a logging directory, and you're all set.

Now just read the docs, and run Snort with the appropriate command-line arguments--use the full path to all binaries 
and config files.

Also, not that it's any of my business, you don't sound all that comfortable with the operating system itself.  This 
is surely slowing you down and causing some frustration.  Learn FreeBSD first, then move on to securing it, 
scripting, etc., then start the IDS work.  Once you get Snort running, you're going to have a bear of time testing 
and tweaking without some knowledge of BSD scripting for shortcuts.  For example, while I concur that the package 
does install things in some backwards, useless places, you can find everything you need with a simple "find / -name 
"snort*" -print" and run as is.

Hope this helps.

Cheers

Keith  
--------------------------------------------------------
1. I cant find snort.conf (or any snort file for that matter)

2. Permissions?

I made a directory called snort in /var/log to see if it would fix it and then I did the command snort  -h 
172.16.0.1/10 -c snort.conf -l/snort/ -dev
still an error message!  


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Stuff, things, and much much more.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Stuff, things, and much much more.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: