[Snort-users] Initializing Output Plugins!

Sander Smeenk ssmeenk at ...6257...
Sun Oct 6 14:15:02 EDT 2002


Quoting Erek Adams (erek at ...577...):
> > Starting Network Intrusion Detection System: snortInitializing Output Plugins!
>      540     if(!pv.quiet_flag)
> If the quiet flag is not set, then it would print that.  But since you're
> setting it it shouldn't be printing.
> If you _are_ running with the -D flag, then there's something else going on.

The exact line i'm starting snort with is:

/usr/sbin/snort -m 027 \
  -D \
  -S "HOME_NET=[195.64.xx.xxx/32,192.168.1.34/32]" \
  -c /etc/snort/snort.conf \
  -l /var/log/snort \
  -b \
  -d \
  -q \
  -u snort \
  -g snort \
  -i eth0

And if I run that on the commandline I get:

[23:12] [root at ...7086...:~] # /usr/sbin/snort -m 027 -D -S "HOME_NET=[192.168.xx.xxx/32,192.168.1.34/32]" -c /etc/snort/snort.conf -l /var/log/snort -b -d -q -u snort -g snort -i eth0
Initializing Output Plugins!
[23:12] [root at ...7086...:~] # 

So it must be something else. For now I have commented out the messages
in the sourcecode, but this certainly isn't the way to do it...

Especially not in a Debian Package ;)

Regards,
Sander.

-- 
| Alles hat ein ende, nur die wurst hat zwei
| 1024D/08CEC94D - 34B3 3314 B146 E13C 70C8  9BDB D463 7E41 08CE C94D




More information about the Snort-users mailing list