Re: Snort not logging to the /var/log/snort/alert file

["Shawn Kottke" <skottke () DATALINK com>]

Does the user that you run snort under have rights to write to the file that you created?

Do an ll on the file and check the user, group and flag settings.

Are these appropriate for the user that snort runs under?

Shawn Kottke
Datalink Corporation


-----Original Message-----
From: snort-users-admin () lists sourceforge net <snort-users-admin () lists sourceforge net>
To: Rodrigo B. Ramos <rodrigo.ramos () triforsec com br>
CC: snort-users () lists sourceforge net <snort-users () lists sourceforge net>
Sent: Wed Mar 24 13:47:18 2004
Subject: Re: [Snort-users] Snort not logging to the /var/log/snort/alert        file

I'm a little embarrased to admit this but I'm kind of a Linux noob (I'm learning though). When you say permissions do 
you mean permissions for the Snort user account I created or the Snort application itself. Also can somebody give me 
the command to give permssions to Snort so it can write to the file (chmod?)? 

Thanks for all the help!


Alan


_______________________________________
Hi,

Did you create it with the permissions? Did you give permissions to the
snort to write on it?


Best regards,
Rodrigo Ramos
http://www.triforsec.com.br
http://www.defenselayer.com


On Wed, 2004-03-24 at 15:06, ids () san rr com wrote:
> Hi-
>
> I'm a goof and accidently deleted my /var/log/snort/alert file. After I deleted I tried to recreate the file. I 
> noticed that Snort no longer writes alerts to this file. I've tried everything. Can anybody help me? Thanks in 
> advance!
>
>
> Alan
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users