Snort mailing list archives
Logging acts strange in 1.8.3
From: kai.hanisch () philips com
Date: Mon, 18 Mar 2002 12:47:15 +0100
Hi, im using Snort 1.8.3 on a Debian Woody 3.0 with Kernel 2.4.17. snort is running like this: /usr/local/bin/snort -D -l /var/log/snort -h xxx.xxx.xxx.xxx/22 -s -c /rules/snort.conf The problem is that logging seems to work pretty well, at least regarding portscans, but no file /var/log/snort/alert is being created while /var/log/snort/portscan.log exists. Directory permissions on /var/log/snort are 700, owner/group is root (snort runs as root). I once got the message: FATAL ERROR: [!] ERROR: Can not get write access to logging directory "/var/log/snort". (directory doesn't exist or permissions are set incorrectly or it is not a directory at all) This obviously isn't true, as all the ip-related directories and, as mentioned, portscan.log, are being created and updated. What could be wrong? Thanks for any help Kai _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Logging acts strange in 1.8.3 kai . hanisch (Mar 18)
- Re: Logging acts strange in 1.8.3 Martin Roesch (Mar 18)
- <Possible follow-ups>
- Re: Logging acts strange in 1.8.3 kai . hanisch (Mar 18)
- Re: Logging acts strange in 1.8.3 John Sage (Mar 18)