[Snort-users] permission issue

waldo kitty wkitty42 at ...14940...
Mon Apr 8 13:05:38 EDT 2013

On 4/6/2013 14:48, Balla István wrote:
> Hi Members,
> I'm facing problems when I run snort with
> sudo /usr/local/snort/bin/snort -u snort -g snort -c
> /usr/local/snort/etc/snort.conf -i eth1
> command. I followed the http://www.snort.org/assets/158/snortinstallguide293.pdf
> guide and it seemed to work but I got the error message at the end:
> ERROR: spo_unified2.c(321) Could not open /var/log/snort/snort.u2.1365276051:
> Permission denied
> Fatal Error, Quitting..
> There is no traffic yet on eth1 but I think this issue is related to the log
> somehow.

your snort user and/or group do not have write permissions to /var/log/snort... 
what are the permissions of that directory? fix those and you should be ok...

More information about the Snort-users mailing list