Re: OpenPcap() error

[Alberto Gonzalez <albertg () wwjh net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1




On Tue, 18 Mar 2003, Robert Cole wrote:

> >     config set_gid: snort
> >     config set_uid: snort
>
> That's what I have and I get the group null error. When I change them to their 
> respective numbers I get an error about not able to look up the user from the 
> id (1000).
>
> Commented out and the log rule corrected snort runs. :) But it would still be 
> nice to run snort as a user/group. :)

I've actually had the same problems with config parameter within the snort 
conf. Andrew knows about it. you can specifiy -u and -g on the command 
line and -D for daemon mode. It would be nice to just snort -c 
/etc/snort.conf without all those command line args.. but :)

> Also snort doesn't seem to pay attention to the config daemon param. I still 
> have to use -D if I want it to load up that way. Why is that?

IIRC, it was something to do with the current parser that it isnt taking 
the config correctly. Talk to Andrew he knows :)

> Thanks,
> Robert

 Cheers,
 Alberto Gonzalez

- -- 
"Success comes to the person who does today, what you are thinking of doing tomorrow." 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+d/yma3vAB/3yp/IRAm9HAJ9SUJdimenzNDrTct6X+wX22ekt5wCgq2pG
U6xddTMBJ4/eTAsBeTPAt1s=
=zNdl
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users