[Snort-users] Snort switches to packet Dump Mode
wkitty42 at ...14940...
Wed Jul 17 14:30:17 EDT 2013
On 7/17/2013 13:29, Mayur Patil wrote:
> Thanks Waldo for reply.
> As I have done in new installation, as per knowledge (from pdf ;) )
> I have not created any link to /etc/init.d/snort
> *other than /usr/local/bin*. So symbolic link is only at
> /usr/local/bin which we have discussed earlier.
> Other not exist as per I setup.
ok... then it should work if centos uses only /etc/init.d files...
> On Wed, Jul 17, 2013 at 10:46 PM, waldo kitty <wkitty42 at ...14940...
> <https://mail.google.com/mail/u/0/?view=cm&fs=1&tf=1&to=wkitty42@...14940...>> wrote:
> On 7/17/2013 12:58, Mayur Patil wrote:
> > sorry one question remaining
> > now if I reboot my system does it will go into packet dump mode??
> AFAICT, it never has... you were starting a new copy of snort that was running
> in packet dump mode...
> did you have to create any links in /etc/rc.d or similar to point to
> /etc/init.d/snort when you set it up? you might want to check to see if those
> links are still connected and connected to the /etc/init.d/snortd script file...
> you might even want to remove those links and redo them with the new snortd name
> instead of the old snort name... i don't have that pdf any more so i don't know
> if there was something about the links or not...
NOTE: No off-list assistance is given without prior approval.
Please keep mailing list traffic on the list unless
private contact is specifically requested and granted.
More information about the Snort-users