This is a discussion on Re: [Snort-users] Where does snort write it's errors to.? within the Snort forums, part of the System Security and Security Related category; Mark, How did you install Snort? I recently installed it from RPM on Fedora Core 3, and it was definitely ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Mark,
How did you install Snort? I recently installed it from RPM on Fedora Core 3, and it was definitely logging messages to /var/log/messages. Also, what user are you running Snort as? If that user doesn't have write permissions on /var/log/messages, that could be an issue. That's especially true if you're starting it from a non-root account like "mark" and then suid'ing to, say, the user "snort" -- if you start Snort from a root shell and have it suid over, you might at least get error messages written out before it suid's. Alex Kirk Research Analyst Sourcefire, Inc. > Hi All, > > when snort gives errors at startup during boot it doesn't write to > either /var/log/boot.log or /var/log/messages. Where can I find the > error messages.? I'm using Fedora3. Cheers. > > Mark Sargent. > > > ------------------------------------------------------- > This SF.net email is sponsored by Demarc: > A global provider of Threat Management Solutions. > Download our HomeAdmin security software for free today! > http://www.demarc.com/info/Sentarus/hamr30 > _______________________________________________ > Snort-users mailing list > Snort-users@lists.sourceforge.net > Go to this URL to change user options or unsubscribe: > https://lists.sourceforge.net/lists/...fo/snort-users > Snort-users list archive: > http://www.geocrawler.com/redir-sf.p...st=snort-users ------------------------------------------------------- This SF.net email is sponsored by Demarc: A global provider of Threat Management Solutions. Download our HomeAdmin security software for free today! http://www.demarc.com/info/Sentarus/hamr30 _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users |