Snort mailing list archives

Freebsd + snort (error when Snort start)


From: "FRANCIS PROVENCHER" <francis.provencher () msp gouv qc ca>
Date: Tue, 19 Dec 2006 15:42:49 -0500

Hi all, 

I dont know if i post this question on good mailing list, but i wish
it's the good list.

I have update my Freebsd's box on this week (Snort run for about 2 year
on it without problem's). After i restart the box's and snort can't load
correctly.

The only error i can see is on the /var/log/messages

It look like this;

Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
'realplayer.playlist' is checked but not ever set.
Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
'dce.bind.netware_cs' is checked but not ever set.
Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
'dce.bind.veritas' is set but not ever checked.
Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
'ms_sql_seen_dns' is checked but not ever set.
Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
'dce.isystemactivator.bind' is checked but not ever set.
Dec 19 14:17:31 portableBS snort[27675]: 248 out of 512 flowbits in
use.
Dec 19 14:17:31 portableBS snort[27675]: *** *** interface device
lookup found: rl0 ***
Dec 19 14:17:31 portableBS snort[27675]: Initializing daemon mode
Dec 19 14:17:31 portableBS snort[27676]: PID path stat checked out ok,
PID path set to /var/run/
Dec 19 14:17:31 portableBS snort[27676]: Writing PID "27676" to file
"/var/run//snort_rl0.pid"
Dec 19 14:17:31 portableBS snort[27675]: Daemon parent exiting
Dec 19 14:17:31 portableBS snort[27676]: Daemon initialized, signaled
parent pid: 27675

Snort dont start.
I have look to the conf file, found nothing with interest.

Some one can help me?



Francis Provencher
Ministère de la Sécurité publique du Québec
Direction des technologies de l'information
Tél: 1 418 646-3258
Courriel:   Francis.provencher () Msp gouv qc ca
 
CEH - Certified Ethical Hackers
SSCP - System Security Certified Practitionner
Sec+ - Security +

Attachment: FRANCIS PROVENCHER.vcf
Description:

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: