[Snort-users] Snort startup

Mohamed Eldesoky eldesoky.lists at ...11827...
Sun Jun 5 01:22:11 EDT 2005


Just curious, are you one of the developers of BASE ??
:)


On 5/31/05, Briggs, Bruce <Bruce.Briggs at ...13183...> wrote:
> And, consider using BASE instead of ACID.
> http://secureideas.sourceforge.net/
> 
> Bruce
> 
> -----Original Message-----
> From: snort-users-admin at lists.sourceforge.net
> [mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of richard
> Sent: Tuesday, May 31, 2005 3:29 PM
> To: Dominik Gehl
> Cc: snort-users at lists.sourceforge.net
> Subject: Re: [Snort-users] Snort startup
> 
> Hi Dominik,
> 
> Thanks for that, works a treat :)
> 
> 
> On Tue, May 31, 2005 at 03:15:22PM -0400, Dominik Gehl wrote:
> > Hi,
> >
> > it should work fine if you set in /etc/sysconfig/snort
> >
> > ALERTMODE=
> > BINARY_LOG=0
> >
> > Dominik
> >
> > On Tue, 2005-05-31 at 20:05 +0100, richard wrote:
> > > Hi,
> > >
> > > I'm new to snort seem to be doing OK with it but have run into a
> small problem. I'm running snort on a fedora core 3 box, logging to
> local mysql DB and using ACID as well.
> > >
> > > Everything is working great except when I start snort from the
> /etc/init.d/snortd script. When I start the service with that script
> snort stops logging to the db, from what I gather this is because the
> init script uses -A as an argument. I've set alertmode to 'none' in
> /etc/sysconfig/snort but still it won't log to db.
> > >
> > > If I start snort manualy with 'snort -c /etc/snort/snort.config' all
> works.
> > >
> > > Any one know how to sort this out?
> >
> >
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by Yahoo.
> Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
> Search APIs Find out how you can build Yahoo! directly into your own
> Applications - visit
> http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by Yahoo.
> Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
> Search APIs Find out how you can build Yahoo! directly into your own
> Applications - visit http://developer.yahoo.net/?froffad-ysdn-ostg-q22005
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?listsnort-users
> 


-- 
Mohamed Eldesoky
www.eldesoky.net
RHCE




More information about the Snort-users mailing list