Re: Initializing Output Plugins!

[Sander Smeenk <ssmeenk () freshdot net>]

Quoting Erek Adams (erek () theadamsfamily net):
> > Starting Network Intrusion Detection System: snortInitializing Output Plugins!
>      540     if(!pv.quiet_flag)
> If the quiet flag is not set, then it would print that.  But since you're
> setting it it shouldn't be printing.
> If you _are_ running with the -D flag, then there's something else going on.

The exact line i'm starting snort with is:

/usr/sbin/snort -m 027 \
  -D \
  -S "HOME_NET=[195.64.xx.xxx/32,192.168.1.34/32]" \
  -c /etc/snort/snort.conf \
  -l /var/log/snort \
  -b \
  -d \
  -q \
  -u snort \
  -g snort \
  -i eth0

And if I run that on the commandline I get:

[23:12] [root@knopje:~] # /usr/sbin/snort -m 027 -D -S "HOME_NET=[192.168.xx.xxx/32,192.168.1.34/32]" -c 
/etc/snort/snort.conf -l /var/log/snort -b -d -q -u snort -g snort -i eth0
Initializing Output Plugins!
[23:12] [root@knopje:~] # 

So it must be something else. For now I have commented out the messages
in the sourcecode, but this certainly isn't the way to do it...

Especially not in a Debian Package ;)

Regards,
Sander.

-- 
| Alles hat ein ende, nur die wurst hat zwei
| 1024D/08CEC94D - 34B3 3314 B146 E13C 70C8  9BDB D463 7E41 08CE C94D


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users