Snort mailing list archives

Re: Snort switches to packet Dump Mode


From: Mayur Patil <ram.nath241089 () gmail com>
Date: Tue, 16 Jul 2013 22:40:55 +0530

Thanks Waldo for this guidance.

Hope this will end my issue !!

Thanks again !!

-- 
*Cheers,
Mayur*.

On Tue, Jul 16, 2013 at 10:34 PM, waldo kitty <wkitty42 () windstream net>wrote:

On 7/16/2013 07:05, Mayur Patil wrote:
In continuation with previous mail,

    I recompiled Snort and Daq from source.

    (This time I put script of snort from the snort website)

    I got snort compilation successful and snort exit.

    The output I am getting now are

    [root@clc init.d]# ./snort status
    snort (pid  15718) is running...

    [root@clc init.d]# snort status
*Running in packet dump mode*

*./snort* and *snort* are NOT the same when you are in that directory! ;)

now do yourself a huge favor and rename /etc/init.d/snort to something
else so
that you will no longer be confused if you are running snort directly or
running
the script to manage snort... if you are going to use the script, use the
script
all the time...

perhaps something like
   mv /etc/init.d/snort /etc/init.d/snortd

then use /etc/init.d/snortd everywhere and stop using snort plain without
the d...

OR rename your snort binary and alter your /etc/init.d/snort script to use
the
binary's new name...
------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: