Re: Snort 2.4.4 on CentOS 4.3 won't listen on ppp0

[John Messinger <john_messinger () acslink net au>]

The /etc/sysconfig/snort script uses a CONF variable that points to the 
/etc/snort/snort.conf file:

# Where is Snort's configuration file?
# -c {/path/to/snort.conf}
CONF=/etc/snort/snort.conf

The start option in /etc/init.d/snortd is making use of the $CONF 
variable in the command line that starts snort. Should it not then make 
use of the output plugin configuration information in the snort.conf file?

At the end of the day, I can remove the RPM and install from source, but 
I had hoped I could shortcut it somewhat :)

John


Patrick S. Harper wrote:
> look at the init script, if i remember right it does not use 
> /etc/snort/snort.conf if you install from RPM.  I think it uses 
> something in /etc/sysconfig.  but it has been a while.  I love RPM's for 
> system management but snort is one of those things i would rather 
> compile for each system personally.
>
> John Messinger wrote:
> > Joel,
> >
> > That's the funny thing. It seems to be running fine in daemon mode. 
> > This is the syslog output I get when starting it up via the 
> > /etc/init.d script:


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users