Re: help

[Heine Lysemose <lysemose () gmail com>]

Hi

This is correct behavior.
If you wan't the prompt to return after running your Snort start-up command
add a -D to start Snort as a daemon. See Snort manual 1.9.1...

*$ sudo /usr/local/snort/bin/snort -c /usr/local/snort/etc/snort.conf -i
eth0 -D*

/Lysemose

On Fri, Jan 27, 2012 at 6:58 AM, Jagan Mohan Reddy D <
jagan.mohan507 () gmail com> wrote:

> I was successfully installed snort on Ubuntu 10.04 as per the doc provided
> by Snort web site.
>
> I am using only one Ethernet card on my machine....
>
> But after installation, while running the snort by using the following
> line....
>
> $ sudo /usr/local/snort/bin/snort -c /usr/local/snort/etc/snort.conf -i
> eth0
>
>
> --------------------------------------------------------------------------------
> [ Number of patterns truncated to 20 bytes: 1033 ]
> pcap DAQ configured to passive.
> The DAQ version does not support reload.
> Acquiring network traffic from "eth0".
> Reload thread starting...
> Reload thread started, thread 0xa6c93b70 (2700)
> Decoding Ethernet
>
>         --== Initialization Complete ==--
>
>    ,,_     -*> Snort! <*-
>   o"  )~   Version 2.9.2 IPv6 GRE (Build 78)
>    ''''    By Martin Roesch & The Snort Team:
> http://www.snort.org/snort/snort-team
>            Copyright (C) 1998-2011 Sourcefire, Inc., et al.
>            Using libpcap version 1.0.0
>            Using PCRE version: 7.8 2008-09-05
>            Using ZLIB version: 1.2.3.3
>
>            Rules Engine: SF_SNORT_DETECTION_ENGINE  Version 1.15  <Build
> 18>
>            Rules Object: web-misc  Version 1.0  <Build 1>
>            Rules Object: snmp  Version 1.0  <Build 1>
>            Rules Object: exploit  Version 1.0  <Build 1>
>            Rules Object: netbios  Version 1.0  <Build 1>
>            Rules Object: p2p  Version 1.0  <Build 1>
>            Rules Object: multimedia  Version 1.0  <Build 1>
>            Rules Object: chat  Version 1.0  <Build 1>
>            Rules Object: bad-traffic  Version 1.0  <Build 1>
>            Rules Object: web-iis  Version 1.0  <Build 1>
>             Rules Object: nntp  Version 1.0  <Build 1>
>            Rules Object: imap  Version 1.0  <Build 1>
>            Rules Object: web-client  Version 1.0  <Build 1>
>            Rules Object: icmp  Version 1.0  <Build 1>
>            Rules Object: web-activex  Version 1.0  <Build 1>
>            Rules Object: dos  Version 1.0  <Build 1>
>            Rules Object: smtp  Version 1.0  <Build 1>
>            Rules Object: specific-threats  Version 1.0  <Build 1>
>            Rules Object: misc  Version 1.0  <Build 1>
>            Preprocessor Object: SF_DNS (IPV6)  Version 1.1  <Build 4>
>            Preprocessor Object: SF_REPUTATION (IPV6)  Version 1.1  <Build
> 1>
>            Preprocessor Object: SF_SSLPP (IPV6)  Version 1.1  <Build 4>
>            Preprocessor Object: SF_SSH (IPV6)  Version 1.1  <Build 3>
>            Preprocessor Object: SF_SMTP (IPV6)  Version 1.1  <Build 9>
>            Preprocessor Object: SF_MODBUS (IPV6)  Version 1.1  <Build 1>
>            Preprocessor Object: SF_GTP (IPV6)  Version 1.1  <Build 1>
>            Preprocessor Object: SF_IMAP (IPV6)  Version 1.0  <Build 1>
>            Preprocessor Object: SF_POP (IPV6)  Version 1.0  <Build 1>
>            Preprocessor Object: SF_DCERPC2 (IPV6)  Version 1.0  <Build 3>
>            Preprocessor Object: SF_FTPTELNET (IPV6)  Version 1.2  <Build
> 13>
>            Preprocessor Object: SF_SIP (IPV6)  Version 1.1  <Build 1>
>            Preprocessor Object: SF_DNP3 (IPV6)  Version 1.1  <Build 1>
>            Preprocessor Object: SF_SDF (IPV6)  Version 1.1  <Build 1>
> Commencing packet processing (pid=2700)
>
>
> -----------------------------------------------------------------------------------------------------------------
> After this, Snort is not running and the courser is blinking......
>
> can any one help on this problem,
>
>
> ----------------
> D J M Reddy
> CSIS Dept
> BITS-PILANI HYD campus
>
>
> ------------------------------------------------------------------------------
> Try before you buy = See our experts in action!
> The most comprehensive online learning library for Microsoft developers
> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
> Metro Style Apps, more. Free future releases when you subscribe now!
> http://p.sf.net/sfu/learndevnow-dev2
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!