[Snort-users] Snort-Running But not Logging....!!

Slighter, Tim tslighter at ...5174...
Mon Mar 4 11:24:19 EST 2002

I know that I had problems when I did not create a directory /var/log/snort
and chmod at minimum 755 prior to doing the install.  This did fix the
problem for my particular issue on a Redhat 7.1 install

-----Original Message-----
From: McCammon, Keith [mailto:Keith.McCammon at ...3497...]
Sent: Monday, March 04, 2002 6:37 AM
To: kamesh_rajaram at ...4543...; snort-users at lists.sourceforge.net
Cc: DEMARC-Users at ...2629...
Subject: RE: [Snort-users] Snort-Running But not Logging....!!

Not really familiar with Linux, but have you tried doing a touch on the
file?  Under some circumstances, I have to touch my alert file (using
FreeBSD) before Snort can write to it.  This usually happens when I'm
testing, and doing a lot of alert file deletion, etc.

Just a Monday morning thought...

-----Original Message-----
From: kamesh_rajaram at ...4543... [mailto:kamesh_rajaram at ...4543...]
Sent: Monday, March 04, 2002 2:48 AM
To: snort-users at lists.sourceforge.net
Cc: DEMARC-Users at ...2629...
Subject: [Snort-users] Snort-Running But not Logging....!!

Hi Snort/Demarc Users....!!
	This is abt a strange behaviour of snort 1.8.3. I am using
DEMARC console to monitor in a Linux 7.0 server with 2 ethernet cards.
My problem is that snort is running, but not logging any of the packets
that come to the network. The ifconfig command shows that the packets
are being picked by the NIC. If i stop & restart it, it works fine. I am
unable to figure out the problem... Is there any log that tells me of
this kind of a problem...?? Or what can be done to solve this
problem......Any advice in this regard will be helpful...

Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list