[Snort-users] Snort not starting...
rmardo at ...1751...
Fri Apr 13 03:04:29 EDT 2001
i'm not familiar with solaris but look at your definition of
"$elxl0_ADDRESS". is your nic really "elxl0"?
from my obsd system i'm using "xl0" as ifconfig shows that as my NICs'.
----- Original Message -----
From: "Phil" <foo_bar_00 at ...131...>
To: "snort users" <snort-users at lists.sourceforge.net>
Sent: Friday, April 13, 2001 6:43 AM
Subject: [Snort-users] Snort not starting...
> Hey all, I'm still messing around with snort. I've
> changed my snort.conf file to look like:
> var HOME_NET $elxl0_ADDRESS
> var EXTERNAL_NET !$HOME_NET
> var SMTP X.X.X.X
> var HTTP_SERVERS $HOME_NET
> var SQL_SERVERS $HOME_NET
> where X.X.X.X is a valid IP.
> and I'm now starting snort with:
> /usr/local/bin/snort -A fast -l /var/log/snortlogs -c
> /etc/snort/snort.conf -D
> where /var/log/snortlogs DOES exist. Unfortunately,
> when I start snort, it says it's initializing daemon
> mode but dies. The error message in /var/adm/messages
> Apr 11 20:34:01 MYHOST.MYNETWORK snort: [!]
> ERROR: Bad value in variable definition!
> Apr 11 20:34:01 MYHOST.MYNETWORK snort:
> Make sure you don't have a "$" in the var name
> I've tried using "var HTTP_SERVERS HOME_NET" (i.e.
> without the $) but that didn't work. It DID work
> before when I had !$HOME_NET for EXTERNAL_NET, but I
> had 10.x.x.x numbers for HTTP and MYSQL.
> I'm running Solaris 2.6 x86. Thanks for your help.
> Do You Yahoo!?
> Get email at your own domain with Yahoo! Mail.
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users