AW: Snort loading at startup

["Poppi, Sandro" <Sandro.Poppi () wacker com>]

Ted,
 
take a look on the script described in the HOWTO at
http://www.lug-burghausen.org/projects/index.html#snort-stat
<http://www.lug-burghausen.org/projects/index.html#snort-stat> . It's
designed to start multiple instances of snort along with swatch, but when
stopping snort the interfaces are shut down too.
 
HTH,
Sandro

-----Ursprüngliche Nachricht-----
Von: Ted Stringer [mailto:teds () lancasterlawyers com]
Gesendet: Dienstag, 14. Mai 2002 19:10
An: counter.spy () gmx de
Cc: snort-users () lists sourceforge net
Betreff: RE: [Snort-users] Snort loading at startup


I just started to experiement with the script, and got snort to start.  I
would like to pull the interface controls into the script, so that the
interface is only active when snort is running.  I was able to sucessfully
able to do this and get Snort to start, now I can't get it to stop and kill
the interface!  I am working on that side of the script now. 

Ted 

On Tue, 2002-05-14 at 12:38, counter.spy () gmx de wrote: 

Ted,

the BSD script you mentioned works fine on Linux if you do some

minor changes. 



I am afraid I haven't the modified script here right now, cause I am at

home, but if I am remembering correctly, I had just left out everything I
did not

understand, and voila, it worked (I am still quite a Linux newbie, too). ;-)





However I am now using the script that was shipped with my SuSE distro.

(the src rpm for snort contains a good startup script which works the SuSE

way:

copy the script to /etc/init.d, create a symlink to the runlevel in which

you want Snort to be started, then you'll have to define START_SNORT in

rc.config, set it to 'YES' and at last run SuSEconfig.)

I modified this script according to my needs, e.g. including ifconfig up and

some sleep

intervals, cause I was having timing problems with autonegotiation stuff.



There is another script to be found at:

www.lug-burghausen.org/projects/Snort-Statistics/

(credits to Sandro Poppi) 



Hope that helps.

Greetings,

Detmar





> The interface starts at bootup, and I am not sure how to add it to the

script.  I am >kinda new to this linux stuff.  The script was the one that
is on

the documentation page >in the "installing freeBSD, mysql, and Snort

tutorial".

>

> Duh.  that is a freeBSD start script, can anyone send me a linux start

script?

>

> Ted



-- 

GMX - Die Kommunikationsplattform im Internet.

http://www.gmx.net