Re: OpenPcap() error

[Robert Cole <robert.cole () support4linux com>]

I commented out the chroot for now. That took care of the problem with the 
alert file

> > It does except when it sits there logging to the screen taking the tty
> > session. Loggin onto another term and doing a ps shows me that snort is
> > running as root.
>
> That's expected.  Exactly as planned....

umm... I thought it was going to run as user snort if I put the uid and gid as 
that in the conf file?

> Edit your .conf file so that there is a space following each colon.  From
> what you sent earlier, you have:

And I did do this on everything with a :

Almost there! :) The init scripts will have to be modified for sure. I played 
around with them a bit and found the SNORT_OPS and all (a review of the 
gentoo init system was required :) ) and made a few unsuccessful changes to 
it while waiting for the email to ring. :) I'm not all that worried about it. 
It looks like I need to learn how to use the start-stop-daemon app.

I'll worry about getting it running with only a -c param first.

Thanks again.

Robert


-------------------------------------------------------
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users