[Snort-users] OpenLogFile error

Martin Roesch roesch at ...421...
Thu Nov 23 01:06:31 EST 2000


dr Feri Zsuppa'n wrote:
> 
> Hi,
> 
> I have started getting the same
> 
> Nov 16 09:35:28 aas3 snort[23769]: ERROR: OpenLogFile() =>
> fopen(/data/snort/172.131.222.180/ICMP_ECHO) log file: No such file or
> directory
> 
> errors as an earlier posting described here:
> 
> http://archives.neohapsis.com/archives/snort/2000-08/0227.html
> 
> My disk is not full(30%) and the permission on the snort directory is the
> same. I run snort-1.6.3-patch2 on Solaris7/SPARC. I hope that the solution
> is not going back to 1.5....

It shouldn't be.  Did the directory (/data/snort) exist?  How about the IP
address directory?  Did you start the process with -u or -g, and if so did
Snort have perms to write to the directory?

What's your command line config and snort.conf look like?


-- 
Martin Roesch
roesch at ...421...
http://www.snort.org



More information about the Snort-users mailing list