Snort mailing list archives

Can't set logdir in 1.9.0


From: Serge Leschinsky <fish () artlife tomsknet ru>
Date: Mon, 14 Oct 2002 17:08:21 +0700

Dear colleagues.

Until recent times I've used snort 1.8.7. Now I'm trying to update it to 1.9.0
I've built it and tried to start snort with my old init script. A part
of it is below: 
# Specify your network interface here
INTERFACE=eth0
# Specify snort home
SNORTHOME=/var/chroot/snort
# See how we were called.
case "$1" in
  start)
        echo -n "               Snort Intrusion Detection System"
        daemon $SNORTHOME/sbin/snort -u snort -g snort -s -d -D \
                -i $INTERFACE -l /var/chroot/snort/log \
                -t $SNORTHOME -c /etc/snort.conf
        touch /var/lock/subsys/snort
        echo
        ;;
I get an error and can see it in messages:

Oct 14 16:30:55 builder-host snort: FATAL ERROR: ERROR: log directory 'log' does not exist
Oct 14 16:30:55 builder-host snortd: snort startup failed
Oct 14 16:32:43 builder-host snort: Initializing Output Plugins!
I've tried to modify it to /log, but got this error again.

As for the existence of log :
[root@builder-host snort]# ls /var/chroot/snort/ -l
total 36
drwxr-xr-x    2 root     root         4096 Oct 14 15:35 bin
drwxrwxr-x    3 root     admin        4096 Oct 14 15:35 etc
drwxr-x---    2 snort    snort        4096 Oct 14 15:32 log
drwxr-x---    2 root     wheel        4096 Oct 14 15:32 oldlogs
drwxr-xr-x    2 root     root         4096 Oct 14 15:35 sbin
drwxr-x---    5 root     wheel        4096 Oct 14 15:32 weeklogs

Can you point me how to resolve this trouble?

-- 
Yours sincerely
      Serge Leschinsky          mailto:fish () artlife tomsknet ru          

Please visit this link:  http://rotter.net/israel



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: