[Snort-users] Run as user?
joehill at ...3945...
Wed Apr 2 21:22:12 EST 2003
On Wed, 2 Apr 2003 23:40:52 -0500 (EST)
Alberto Gonzalez <albertg at ...8504...> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> > According to the FAQ, the snort tool is supposed to be run as root. Is there any
> > way to run it as a regular user, ie. giving myself permission to read
> > the stream through eth0?
> (root at ...7183...)(~) snort -?
> -g <gname> Run snort gid as <gname> group (or gid) after initialization
> -u <uname> Run snort uid as <uname> user (or uid) after initialization
sorry, what I meant was to actually run snort without first su'ing to root.
is there any way to do this and have access to eth0?
> make sure the logging directory has the proper permissions.
when I run snort, it says it will write to /var/log/snort, but I find no such directory or file.
>And take in mind you won't be able to send a HUP signal.
ie. to kill the process?
>Check the snort-users archive i believe this came up awhile ago.
I must admit, I only went back about 20 pages...;)
> Alberto Gonzalez
> - --
> "Success comes to the person who does today, what you are thinking of doing tomorrow."
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> -----END PGP SIGNATURE-----
> This SF.net email is sponsored by: ValueWeb:
> Dedicated Hosting for just $79/mo with 500 GB of bandwidth!
> No other company gives more support or power for your dedicated server
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users