Snort mailing list archives
Re: Snort..conf?!?!? Please help!
From: "larc" <larc () pandora be>
Date: Tue 14 Jan 2003 12:09:23 +0100
Hi, Your not the first one with this problem, but I don't really know why it doesn't work on some systems. I would suggest to copy the cgi directory from the new beta version over the agent cgi dir. if it then still doesn't work you can try the new management console and see if it works then. Regards, Stefan D. ------------------------ "Paul Clements" <paul.clements () saga co uk> wrote: ------------------------ Hello all.
I'm a newbe so you will have to bare with me! I'm running Snort 1.9.0, Acid 0.9.6b22 on Mandrake 7.3 and recently decided to install snortcenter 0.9.6. I have had no problems with the snortcenter and the Acid plugin installation on my reporting box and everything seemed OK with the installation of the snortcenter sensor agent (famous last words!) Using the sensor agent : I can log in and view system info with no problems but when I push the rule file it names it snort..conf instead of snort.eth1.conf! thus the sensor comes to a grinding holt because it's looking for a file called snort.eth1.conf! The settings for the sensor in Snortcenter clearly has the word "eth1" in the "interface name to sniff" section of the sensor properties box. If I rename the the the snort..conf to snort.eth1.conf and restart the sensor it works fine but every time I update a rule I have to rename the file. What am I doing wrong? Thanks Paul This email and the files sent with it are confidential and for the use of the intended recipient(s) only. If you are not the intended recipient(s), please note that any use, distribution or copying of this communication or the information in it, is strictly prohibited. If you have received this communication in error, please notify the sender or forward this message to postmaster () saga co uk and then destroy the email and any copies of it. This communication is from Saga Services Ltd whose registered office is The Saga Building, Folkestone, UK CT20 1AZ. Registered number 00732602. ------------------------------------------------------- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort..conf?!?!? Please help! Paul Clements (Jan 14)
- <Possible follow-ups>
- Re: Snort..conf?!?!? Please help! larc (Jan 14)