Snort mailing list archives

Re: Snort switches to packet Dump Mode


From: Mayur Patil <ram.nath241089 () gmail com>
Date: Wed, 17 Jul 2013 07:10:25 +0530

Hi Waldo,

      which snort
      gives
      /usr/local/bin/snort

*--*
*Cheers,*
*Mayur*

On Wed, Jul 17, 2013 at 7:02 AM, waldo kitty <wkitty42 () windstream net>wrote:

On 7/16/2013 13:10, Mayur Patil wrote:
Thanks Waldo for this guidance.

Hope this will end my issue !!

Thanks again !!

it may or may not... really... this is not DOS or windows... ./ is
important
when you want to execute something in the current directory... *stop using*

   cd /etc/init.d

to change directory before you execute your script... instead execute it
with a
fully specified path...

   /etc/init.d/snort

all the time... if you renamed that script as i suggested previously, then
it
would be

   /etc/init.d/snortd

when you just type in

   snort blah blah blah

you are executing the actual binary directly without using your script...
to
prove this to yourself try

   which snort

and see what it returns... the problem is apparently that your actual snort
binary is in your PATH and that's what is used instead of your script...
changing the name of one or the other will alleviate this problem but will
also
require some additional editing in most cases...

i do truly hope this helps ;)


------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: