[Snort-users] unable to start snort

Shawn Duffy pakkit at ...5471...
Thu May 29 09:50:17 EDT 2003

Snort generally should run as an unprivileged user.  So you should create
a user 'snort' and group 'snort' and make sure it has the necessary
permissions to read snort.conf and the rules and so on...

Shawn Duffy, CCNA CCSE
email: pakkit at codepiranha dot org
web: http://codepiranha.org/~pakkit
gpg key: http://codepiranha.org/~pakkit/pakkit.asc
gpg fpr: 8988 6FB6 3CFE FE6D 548E  98FB CCE9 6CA9 98FC 665A
having problems reading email from me? http://codepiranha.org/~pakkit/pgp-trouble.html

On Thu, 29 May 2003, Nick Scheider wrote:

> Hi I was wondering if anyone has scene this before.   Could it be
> something wrong with my snortd file?
>  Thanks in advance Nick
> [root at ...9325... root]# ./snortd start
> Starting snort: ERROR: User "snort" unknown
> Fatal Error, Quitting..
>                                                            [FAILED]
> [root at ...9325... root]#
> Post a follow-up to this message
> <http://posting.google.com/post?cmd=post&enc=ISO-8859-1&msg=839fb7bd.030
> 5281405.68c2c59f%40posting.google.com&gs=/groups%3Fdq%3D%26hl%3Den%26lr%
> 3D%26ie%3DUTF-8%26group%3Dmailing.unix.snort%26selm%3D839fb7bd.030528140
> 5.68c2c59f%2540posting.google.com>

More information about the Snort-users mailing list