[Snort-users] Can't chroot snort 1.8 beta6 build 26

Robert D. Hughes rob at ...1932...
Wed Jun 20 11:36:45 EDT 2001


All,
 
What's wrong with this picture? (lines are wrapped)
 
#! /bin/sh
# Snort startup script
PREFIX=/`expr $0 : '/\(.*\)/etc/rc.d/snort.sh'`
if [ "x${PREFIX}" = "x/" ]; then
        printf "\snort: Cannot determine PREFIX.\n" >&2
        exit 64
fi
case $1 in
        start)  echo -n ' snort'
                ${PREFIX}/bin/snort -A FULL -c ${PREFIX}/etc/snort/snort.conf
-dDeX -i xl0 -u snort -l / -L snortdumpout -t /var/log/snort
                ${PREFIX}/bin/snort -A FULL -c ${PREFIX}/etc/snort/snort.conf
-dDeX -i xl1 -u snort -l / -L snortdumpin -t /var/log/snort
                ;;
        stop)   killall snort
                ;;
esac

/var/log/snort is owned by snort:security, but as soon as I run the script,
snort starts then dies. /var/log/messages only indicates the if going into
promiscuous mode then exiting. Snort runs fine with the -t removed. What am I
doing wrong, or does anyone have an example script they would be willing to
share?
 
Thanks,
Rob





More information about the Snort-users mailing list