[Snort-users] Snort switches to packet Dump Mode
ram.nath241089 at ...11827...
Tue Jul 16 13:10:55 EDT 2013
Thanks Waldo for this guidance.
Hope this will end my issue !!
Thanks again !!
On Tue, Jul 16, 2013 at 10:34 PM, waldo kitty <wkitty42 at ...14940...>wrote:
> On 7/16/2013 07:05, Mayur Patil wrote:
> > In continuation with previous mail,
> > I recompiled Snort and Daq from source.
> > (This time I put script of snort from the snort website)
> > I got snort compilation successful and snort exit.
> > The output I am getting now are
> > [root at ...16428... init.d]# ./snort status
> > snort (pid 15718) is running...
> > [root at ...16428... init.d]# snort status
> > *Running in packet dump mode*
> *./snort* and *snort* are NOT the same when you are in that directory! ;)
> now do yourself a huge favor and rename /etc/init.d/snort to something
> else so
> that you will no longer be confused if you are running snort directly or
> the script to manage snort... if you are going to use the script, use the
> all the time...
> perhaps something like
> mv /etc/init.d/snort /etc/init.d/snortd
> then use /etc/init.d/snortd everywhere and stop using snort plain without
> the d...
> OR rename your snort binary and alter your /etc/init.d/snort script to use
> binary's new name...
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users