[Snort-users] Snort switches to packet Dump Mode

Mayur Patil ram.nath241089 at ...11827...
Wed Jul 17 13:29:50 EDT 2013

Thanks Waldo for reply.

As I have done in new installation, as per knowledge (from pdf ;) )

I have not created any link to /etc/init.d/snort

*other than /usr/local/bin*. So symbolic link is only at

/usr/local/bin which we have discussed earlier.

Other not exist as per I setup.



On Wed, Jul 17, 2013 at 10:46 PM, waldo kitty
<wkitty42 at ...14940...<https://mail.google.com/mail/u/0/?view=cm&fs=1&tf=1&to=wkitty42@...14940...>
> wrote:

> On 7/17/2013 12:58, Mayur Patil wrote:
> > sorry one question remaining
> >
> > now if I reboot my system does it will go into packet dump mode??
> AFAICT, it never has... you were starting a new copy of snort that was
> running
> in packet dump mode...
> did you have to create any links in /etc/rc.d or similar to point to
> /etc/init.d/snort when you set it up? you might want to check to see if
> those
> links are still connected and connected to the /etc/init.d/snortd script
> file...
> you might even want to remove those links and redo them with the new
> snortd name
> instead of the old snort name... i don't have that pdf any more so i don't
> know
> if there was something about the links or not...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130717/6fcea539/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: snort2945_CentOS6x.pdf
Type: application/pdf
Size: 25237 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130717/6fcea539/attachment.pdf>

More information about the Snort-users mailing list