Snort mailing list archives
Openbsd 3.3 snort no log output
From: Duncan Matthew Stirling <duncan () mbase com>
Date: Tue, 27 May 2003 15:57:32 -0600
I have just built a new IDS box on OpenBSD, and successfully built snort http://www.snort.org/dl/snort-2.0.0.tar.gz.
Everything seemed to go fine, but snort won't generate logging to directory I designate.
I'm launching snort via the cmd: "snort -de -l /ids -c /etc/snort/snort.conf"
I can get tcpdump -nxi fxp1 to logged data..15:55:53.543328 63.250.205.26.80 > my.net.com.64745: . 322482:323942(1460) ack 1 win 64240 (DF)
4500 05dc 213a 4000 7306 8b08 3ffa cd1a 8b8e bd36 0050 fce9 a058 fcd9 da46 f490 5010 faf0 6759 0000 2444 db08 0901 0000 0000 db08 8200 0048 5dd3 0800 8a80 0100 7401 010b 0000 0000 08b6 0800 0046 8d01 009a15:55:53.544038 63.250.205.26.80 > my.net.com.64745: P 323942:324753(811) ack 1 win 64240 (DF)
4500 0353 213b 4000 7306 8d90 3ffa cd1a 8b8e bd36 0050 fce9 a059 028d da46 f490 5018 faf0 63d8 0000 ef82 a05b 9073 3ace d692 1639 b5fb e4b1 89f2 7e8c dbec 6a03 e560 424a 1450 ed09 419c ade5 5d88 efa1 dbc9 How can I resolve this, what should I be looking for? ------------------------------------------------------- This SF.net email is sponsored by: ObjectStore. If flattening out C++ or Java code to make your application fit in a relational database is painful, don't do it! Check out ObjectStore. Now part of Progress Software. http://www.objectstore.net/sourceforge _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Openbsd 3.3 snort no log output Duncan Matthew Stirling (May 28)
- Re: Openbsd 3.3 snort no log output Erek Adams (May 28)