Re: Freebsd + snort (error when Snort start)

[Todd Wease <twease () sourcefire com>]

FRANCIS PROVENCHER wrote:
> Hi all, 
>
> I dont know if i post this question on good mailing list, but i wish
> it's the good list.
>
> I have update my Freebsd's box on this week (Snort run for about 2 year
> on it without problem's). After i restart the box's and snort can't load
> correctly.
>
> The only error i can see is on the /var/log/messages
>
> It look like this;
>
> Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
> 'realplayer.playlist' is checked but not ever set.
> Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
> 'dce.bind.netware_cs' is checked but not ever set.
> Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
> 'dce.bind.veritas' is set but not ever checked.
> Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
> 'ms_sql_seen_dns' is checked but not ever set.
> Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
> 'dce.isystemactivator.bind' is checked but not ever set.
> Dec 19 14:17:31 portableBS snort[27675]: 248 out of 512 flowbits in
> use.
> Dec 19 14:17:31 portableBS snort[27675]: *** *** interface device
> lookup found: rl0 ***
> Dec 19 14:17:31 portableBS snort[27675]: Initializing daemon mode
> Dec 19 14:17:31 portableBS snort[27676]: PID path stat checked out ok,
> PID path set to /var/run/
> Dec 19 14:17:31 portableBS snort[27676]: Writing PID "27676" to file
> "/var/run//snort_rl0.pid"
> Dec 19 14:17:31 portableBS snort[27675]: Daemon parent exiting
> Dec 19 14:17:31 portableBS snort[27676]: Daemon initialized, signaled
> parent pid: 27675
>
> Snort dont start.
> I have look to the conf file, found nothing with interest.
>
> Some one can help me?
>
>   
Those are standard startup messages - I don't see any error.  Are you 
sure Snort didn't start?

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users