[Snort-users] Snort running on Linux 8.0

Demetri Mouratis dmourati at ...3877...
Wed Jul 30 09:48:03 EDT 2003


Hi Vince,

You should be able to see what's going on by doing the following:

# tail -f /var/log/messages| grep snort

And then in a new term:
# /etc/init.d/snort restart
# /etc/init.d/snort status

My guess is something is fouled up with the snort->DB connection.  Try
commenting out the output line you showed below and repeat.

HTH.
On Wed, 30 Jul 2003, Vince McGinnis wrote:

> Hi,
>
> I am looking for some help as I am a newbie to snort running on a Linux box.
> Here is the breakdown on the install of snort:
>
> mkdir /etc/snort
> mkdir /var/log/snort
> tar -xvzf snort-2.0.0.tar.gz
> cd snort-2.0.0
> ./configure - with mysql=/usr/local/mysql
> make
> make install
>
> cd rules
> cp * /etc/snort
> cd ../etc
> cp snort.conf /etc/snort
> cd *.config /etc/snort
>
> I modified the snort.conf file with the following
>
> var HOME_NET 172.20.50.0/24
> var Rule_PATH /etc/snort/
>
> output database: log, mysql, user=root password=password dbname=snort
> host=localhost
>
> I then set Snort to start automatically
>
> I changed the snort file in init.d to the following
>
> CONFIG=/etc/snort/snort.conf
>
> Chmod 755 snort
>
> cd /etc/rc3.d
> ln -s ../init.d/snort S99snort
> ln -s ../init.d/snort K99snort
> cd /etc/rc5.d
> ln -s ../init.d/snort S99snort
> ln -s ../init.d/snort K99snort
>
> I setup up the database in MYSQL and verified that it created correctly.
>
> Now my trouble is when I go to start Snort with snort -D -c snort.conf it
> comes right back to the prompt with no error but looking at processes
> running it does not start. I cannot find anywhere if there is a log on
> errors when starting. I am at a lost as to why it is not starting.
>
> Any help you can give will be appreciated and thanks in advance for taking
> the time to read this.
>
>
>
>
>
> Vincent J. McGinnis
> Senior Systems Integration Specialist
> Library Video Company
> 7 East Wynnewood Road
> Wynnewood, PA 19096
> P: 610-645-4000 x219
> F: 610-645-4090
>  <mailto:vince at ...9755...> vince at ...9755...
>  <http://www.libraryvideo.com> http://www.libraryvideo.com
>
> "Do not dwell in the past, do not dream of the future, concentrate the mind
> on the present moment." -Buddha
>
>
>
>

---------------------------------------------------------------------
Demetri Mouratis
dmourati at ...3878...





More information about the Snort-users mailing list