[Snort-users] Snort dies

Erek Adams erek at ...577...
Wed Nov 6 15:00:08 EST 2002

On Wed, 6 Nov 2002, Cesar Andres Navarrete R. wrote:

> Hi im kind of newbie using snort, im used, the enterprise guide, to
> install snort with acid, snort center and rh 7.3.
> The daemon starts but after some time the daemon suddenly die also in
> /var/log/snort appears an alert 2gb file.
> Also with snortcenter I try to start the daemon again and the script
> throws something like "couldn�t find the config file for snort."
> /root/.snortrc or something like that. Im using the same line wich I
> used in  snortd at /etc/rc.d/init.d at the snort line command.

Sounds like you have more than one problem.  I'm guessing at these, but...

1)  You're using an OS that does not handle files larger than 2GB.  On
some OS'es, you can simply tweak the kernel and then recompile it.  At
that point, all should be well.

2)  It sounds like you aren't specifying the config file in the command
line.  If you command line looks something like "snort <options> -c
/path/to/snort.conf" then all should work.  I'm guessing that you dont'
have the -c option and that you don't have one of the 'default' [0] snort
files created.

Hope that helps!

Erek Adams

[0]	http://marc.theaimsgroup.com/?l=snort-users&m=103653677715182&w=2

More information about the Snort-users mailing list