[Snort-users] snort 2.02 cant start automactically

--0-150374481-1093872781=:91121
Content-Type: text/plain; charset=gb2312
Content-Transfer-Encoding: 8bit

hi,

i have a debian woody box, i have copied the file S99snort to /etc/init.d/snort,and create a symbol link at rc3.d. then i
reboot my box, the following lines traped me:
--------------------------------------------------------------------------------------------------------
Aug 23 18:15:29 andreas kernel: TCP: Hash tables configured (established 4096 b
nd 4096)
Aug 23 18:15:29 andreas kernel: NET4: Unix domain sockets 1.0/SMP for Linux NET
..0.
Aug 23 18:15:29 andreas kernel: ds: no socket drivers loaded!
Aug 23 18:15:29 andreas kernel: VFS: Mounted root (ext2 filesystem) readonly.
Aug 23 18:15:29 andreas kernel: Freeing unused kernel memory: 188k freed
Aug 23 18:15:29 andreas kernel: Adding Swap: 771048k swap-space (priority -1)
Aug 23 18:15:32 andreas kernel: eth0: Promiscuous mode enabled.
Aug 23 18:15:32 andreas kernel: device eth0 entered promiscuous mode
Aug 23 18:15:33 andreas kernel: device eth0 left promiscuous mode
---------------------------------------------------------------------------------------------------------
when the script get snort start, it immediately down and left promiscuous mode, but when i use this command:

sh -x /etc/init.d/snort start

it seems to be worked very well, and why this happened?

/usr/local/bin/snort -c /etc/snort/snort.conf -D
with this command,it also work well

need help!!!




---------------------------------
Do You Yahoo!?
150ÍòÇúMP3·è¿ñËÑ£¬´øÄú´³ÈëÒôÀÖµîÌÃ
ÃÀÅ®Ã÷ÐÇÓ¦Óо¡ÓУ¬ËѱéÃÀͼ¡¢ÑÞͼºÍ¿áͼ
1G¾ÍÊÇ1000Õ×£¬ÑÅ»¢µçÓÊ×ÔÖúÀ©ÈÝ£¡
--0-150374481-1093872781=:91121
Content-Type: text/html; charset=gb2312
Content-Transfer-Encoding: 8bit

<DIV>hi,</DIV>
<DIV>&nbsp;</DIV>
<DIV>i have a debian woody box,&nbsp; i have&nbsp;copied the file S99snort to /etc/init.d/snort,and create a symbol link at rc3.d. then i </DIV>
<DIV>reboot my box, the following lines traped me:</DIV>
<DIV>--------------------------------------------------------------------------------------------------------</DIV>
<DIV>Aug 23 18:15:29 andreas kernel: TCP: Hash tables configured (established 4096 b<BR>nd 4096)<BR>Aug 23 18:15:29 andreas kernel: NET4: Unix domain sockets 1.0/SMP for Linux NET<BR>.0.<BR>Aug 23 18:15:29 andreas kernel: ds: no socket drivers loaded!<BR>Aug 23 18:15:29 andreas kernel: VFS: Mounted root (ext2 filesystem) readonly.<BR>Aug 23 18:15:29 andreas kernel: Freeing unused kernel memory: 188k freed<BR>Aug 23 18:15:29 andreas kernel: Adding Swap: 771048k swap-space (priority -1)<BR>Aug 23 18:15:32 andreas kernel: eth0: Promiscuous mode enabled.<BR>Aug 23 18:15:32 andreas kernel: device eth0 entered promiscuous mode<BR>Aug 23 18:15:33 andreas kernel: device eth0 left promiscuous mode</DIV>
<DIV>---------------------------------------------------------------------------------------------------------</DIV>
<DIV>when the&nbsp;script&nbsp;get snort start, it immediately down and left promiscuous mode, but&nbsp; when i use this command:</DIV>
<DIV>&nbsp;</DIV>
<DIV>sh -x /etc/init.d/snort start</DIV>
<DIV>&nbsp;</DIV>
<DIV>it seems to be worked very well, and why this happened?</DIV>
<DIV>&nbsp;</DIV>
<DIV>/usr/local/bin/snort -c /etc/snort/snort.conf -D</DIV>
<DIV>with this command,it also work well</DIV>
<DIV>&nbsp;</DIV>
<DIV>need help!!!</DIV>
<DIV>&nbsp;</DIV><p><br><hr size=1><b>Do You Yahoo!?</b><br>
<a href="http://music.yisou.com" target=blank>150ÍòÇúMP3·è¿ñËÑ£¬´øÄú´³ÈëÒôÀÖµîÌÃ</a><br><a href="http://image.yisou.com" target=blank>ÃÀÅ®Ã÷ÐÇÓ¦Óо¡ÓУ¬ËѱéÃÀͼ¡¢ÑÞͼºÍ¿áÍ ¼</a><br>
<a href="http://cn.rd.yahoo.com/mail_cn/tag/1g/*http://cn.mail.yahoo.com/event/mail_1g/" target=blank>1G¾ÍÊÇ1000Õ×£¬ÑÅ»¢µçÓÊ×ÔÖúÀ©ÈÝ£¡</a>
--0-150374481-1093872781=:91121--


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users