Re: Snort problems

[Erek Adams <erek () snort org>]

On Thu, 6 Mar 2003, Adam Kennedy wrote:

> I've got so far one server that snort is installed on, but after running
> snort (snort -D -d -c /etc/snort/snort.conf -i eth0 -l /var/log/snort)
> it spits the following into the syslog, then dies silently:
> Mar  6 14:12:56 changeme kernel: device eth0 left promiscuous mode

What version of snort?

If you are using binary logging, then remove the -d parameter.

Remove the -D and then start snort by hand.  See if it initializes and
runs at all.

Does it leave a core file when it dies?  If so, get a backtrace from gdb
and see what the output is.  If it doesn't core, start snort under gdb and
see what causes it to die.

For more detailed info on that, see the BUGS file.

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger 
for complex code. Debugging C/C++ programs can leave you feeling lost and 
disoriented. TotalView can help you find your way. Available on major UNIX 
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users