[Snort-users] Snort running on Linux 8.0

Erek Adams erek at ...950...
Wed Jul 30 09:39:17 EDT 2003

On Wed, 30 Jul 2003, Vince McGinnis wrote:

> CONFIG=/etc/snort/snort.conf

Side note:  Might want to symlink /etc/snort/snort.conf to
/etc/snort.conf.  Snort looks for that by default, so it's just a handy
thing to have. :)

> Now my trouble is when I go to start Snort with snort -D -c snort.conf it
> comes right back to the prompt with no error but looking at processes
> running it does not start. I cannot find anywhere if there is a log on
> errors when starting. I am at a lost as to why it is not starting.

Start Snort by hand.  Don't use a init script for testing.

Start Snort without the -D.  That'll send the output to stdout instead of
/dev/null.  That should let you see what's breaking.  There's also -T that
can test your config.  It just verifies syntax--It doesn't protect you
from doing something silly.


Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson

More information about the Snort-users mailing list