Snort mailing list archives

Re: Snort startup


From: richard <rich () chaotic me uk>
Date: Tue, 31 May 2005 20:28:31 +0100

Hi Dominik,

Thanks for that, works a treat :)


On Tue, May 31, 2005 at 03:15:22PM -0400, Dominik Gehl wrote:
Hi,

it should work fine if you set in /etc/sysconfig/snort

ALERTMODE=
BINARY_LOG=0

Dominik

On Tue, 2005-05-31 at 20:05 +0100, richard wrote:
Hi,

I'm new to snort seem to be doing OK with it but have run into a small problem. I'm running snort on a fedora core 
3 box, logging to local mysql DB and using ACID as well.

Everything is working great except when I start snort from the /etc/init.d/snortd script. When I start the service 
with that script snort stops logging to the db, from what I gather this is because the init script uses -A as an 
argument. I've set alertmode to 'none' in /etc/sysconfig/snort but still it won't log to db.

If I start snort manualy with 'snort -c /etc/snort/snort.config' all works.

Any one know how to sort this out?




-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: