[Snort-users] Initializing Output Plugins!

Erek Adams erek at ...577...
Sun Oct 6 14:07:03 EDT 2002

On Sun, 6 Oct 2002, Sander Smeenk wrote:

> Ofcourse I did, quite obvious -q should stop these messages, but it
> doesn't... I added the -q flag, but still it prints these messages:
> [22:33] [root at ...7086...: .. debian/snort/snort-1.9.0] # /etc/init.d/snort start
> Starting Network Intrusion Detection System: snortInitializing Output Plugins!
> .
> [22:33] [root at ...7086...: .. debian/snort/snort-1.9.0] #

Ok, have a look at plugbase.c:540-543.

     540     if(!pv.quiet_flag)
     541     {
     542         LogMessage("Initializing Output Plugins!\n");
     543     }

If the quiet flag is not set, then it would print that.  But since you're
setting it it shouldn't be printing.

What I'm guessing is that you're running it without the -D flag.  From the
code of LogMessage in util.c:552-572 it seems it makes three checks.  If quiet
and daemon, then return.  If daemon, go to syslog otherwise print to stderr.
That would fit for what you're describing.

If you _are_ running with the -D flag, then there's something else going on.

Erek Adams

More information about the Snort-users mailing list