Snort mailing list archives

RE: snort warnings


From: Bryan Irvine <bryan.irvine () kingcountyjournal com>
Date: 06 Aug 2003 12:25:54 -0700

I compared the syslog.conf file to that of the system that does work,
and they are exactly identical.

when I try to run the same command with -q with absolutely no change. 
This is just too strange...

--Bryan

On Wed, 2003-08-06 at 11:55, Erek Adams wrote:
On Wed, 6 Aug 2003, Bryan Irvine wrote:

it is getting started in Daemon mode I just see the data go by.

[...snip...]

Aug  6 10:05:35 knox3 snort: Snort initialization completed successfully
#################################

It does fire up in Daemon mode, just not quietly like the other one
does.

I'm thinking it might be related to the fact that you only get 1
instance when you run the select and I get 141.

Actually, If that's whats being outputed to the screen I'd say there is
something wierder.  It's like the machine is sending all the syslog output
to the console.  Check your syslog.conf and see if something's kinda odd
in that respect.

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson




-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: