Snort mailing list archives
Can't chroot snort 1.8 beta6 build 26
From: "Robert D. Hughes" <rob () robhughes com>
Date: Wed, 20 Jun 2001 10:36:45 -0500
All,
What's wrong with this picture? (lines are wrapped)
#! /bin/sh
# Snort startup script
PREFIX=/`expr $0 : '/\(.*\)/etc/rc.d/snort.sh'`
if [ "x${PREFIX}" = "x/" ]; then
printf "\snort: Cannot determine PREFIX.\n" >&2
exit 64
fi
case $1 in
start) echo -n ' snort'
${PREFIX}/bin/snort -A FULL -c ${PREFIX}/etc/snort/snort.conf
-dDeX -i xl0 -u snort -l / -L snortdumpout -t /var/log/snort
${PREFIX}/bin/snort -A FULL -c ${PREFIX}/etc/snort/snort.conf
-dDeX -i xl1 -u snort -l / -L snortdumpin -t /var/log/snort
;;
stop) killall snort
;;
esac
/var/log/snort is owned by snort:security, but as soon as I run the script,
snort starts then dies. /var/log/messages only indicates the if going into
promiscuous mode then exiting. Snort runs fine with the -t removed. What am I
doing wrong, or does anyone have an example script they would be willing to
share?
Thanks,
Rob
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Can't chroot snort 1.8 beta6 build 26 Robert D. Hughes (Jun 20)
