Snort mailing list archives
RE: Snort startup
From: "Briggs, Bruce" <Bruce.Briggs () suny edu>
Date: Tue, 31 May 2005 16:28:20 -0400
And, consider using BASE instead of ACID. http://secureideas.sourceforge.net/ Bruce -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of richard Sent: Tuesday, May 31, 2005 3:29 PM To: Dominik Gehl Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] Snort startup Hi Dominik, Thanks for that, works a treat :) On Tue, May 31, 2005 at 03:15:22PM -0400, Dominik Gehl wrote:
Hi, it should work fine if you set in /etc/sysconfig/snort ALERTMODE= BINARY_LOG=0 Dominik On Tue, 2005-05-31 at 20:05 +0100, richard wrote:Hi, I'm new to snort seem to be doing OK with it but have run into a
small problem. I'm running snort on a fedora core 3 box, logging to local mysql DB and using ACID as well.
Everything is working great except when I start snort from the
/etc/init.d/snortd script. When I start the service with that script snort stops logging to the db, from what I gather this is because the init script uses -A as an argument. I've set alertmode to 'none' in /etc/sysconfig/snort but still it won't log to db.
If I start snort manualy with 'snort -c /etc/snort/snort.config' all
works.
Any one know how to sort this out?
------------------------------------------------------- This SF.Net email is sponsored by Yahoo. Introducing Yahoo! Search Developer Network - Create apps using Yahoo! Search APIs Find out how you can build Yahoo! directly into your own Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.Net email is sponsored by Yahoo. Introducing Yahoo! Search Developer Network - Create apps using Yahoo! Search APIs Find out how you can build Yahoo! directly into your own Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort startup richard (May 31)
- Re: Snort startup Jeff Kell (May 31)
- Re: Snort startup Dominik Gehl (May 31)
- Re: Snort startup richard (May 31)
- <Possible follow-ups>
- RE: Snort startup Briggs, Bruce (May 31)
- Re: Snort startup Mohamed Eldesoky (Jun 05)
- Re: Snort startup Paul Schmehl (Jun 05)
- Re: Snort startup Mohamed Eldesoky (Jun 05)