RE: Promiscuous fails with -D

["Corey Rock" <snort_sigs () hotmail com>]

actually, looking at what you wrote, I bet the config file is not in /etc

but instead

-c /etc/snort/snort.conf


> From: "Corey Rock" <snort_sigs () hotmail com>
> To: mbrei () medclaiminc com, Snort-users () lists sourceforge net
> Subject: RE: [Snort-users] Promiscuous fails with -D
> Date: Thu, 10 Jun 2004 22:41:36 +0000
>
> Is this Linux?  check the logs, it will give you a pretty clear clue of 
> what's wrong:
>
> tail  /var/log/messages
>
>
> > From: "Brei, Matt" <mbrei () medclaiminc com>
> > To: <Snort-users () lists sourceforge net>
> > Subject: [Snort-users] Promiscuous fails with -D
> > Date: Tue, 8 Jun 2004 12:25:30 -0400
> >
> > Hello,
> >
> > If I start snort without putting it in daemon mode it works fine, logs
> > to the MySQL server etc.  If I use -D however, eth1 goes into
> > promiscuous mode then right back out.  The snort process continues to
> > run but no data is logged.  I start snort with snort -c /etc/snort.conf
> > -D -o -i eth1.
> >
> > Anyone know why this would happen?
>
> _________________________________________________________________
> Watch the online reality show Mixed Messages with a friend and enter to win 
> a trip to NY 
> http://www.msnmessenger-download.click-url.com/go/onm00200497ave/direct/01/
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by the new InstallShield X.
> From Windows to Linux, servers to mobile, InstallShield X is the
> one installation-authoring solution that does it all. Learn more and
> evaluate today! http://www.installshield.com/Dev2Dev/0504
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

_________________________________________________________________
Watch the online reality show Mixed Messages with a friend and enter to win 
a trip to NY 
http://www.msnmessenger-download.click-url.com/go/onm00200497ave/direct/01/



-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
> From Windows to Linux, servers to mobile, InstallShield X is the
one installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users