[Snort-users] Initialization Error

Erick Mechler emechler at ...7719...
Tue Jan 7 17:53:03 EST 2003


First of all, there's no need to post multiple times to the list.  If you 
don't get a response in 2 hours, that's no need to panic :)

:: Portscan2 config:
::     log: /var/log/snort/scan.log
::     scanners_max: 3200
::     targets_max: 5000
::     target_limit: 5
::     port_limit: 20
::     timeout: 60
:: Can't open logfile: (null)Fatal Error, Quitting...
:: 
:: Could you please help?

In regards to your specific question, I'm guessing it has something to do
with the fact that whomever you're running snort as can't open the logfile,
precisely what the error message states above.  Check that the snort user
can write to /var/log/snort/scan.log, and that it exists (man touch(1) if
it doesn't).

Cheers - Erick




More information about the Snort-users mailing list