Re: Problem with running Snort

[Fred Portnoy <fportnoy () mail plymouth edu>]

I'm not yet familiar with the details 1.8.7 but you will need a snort.conf file if
you don't have one, and you will need to tell snort where it is, if not in the
default location, which on my system is /etc/snort.conf.

dawnshade wrote:

> When ruuning snort from command line: su-2.05a# snort -v
>
> Snort starting, but does nothing!!!
>
> su-2.05a# snort -v
> Log directory = /var/log/snort
>
> Initializing Network Interface cp0
>
>         --== Initializing Snort ==--
> Decoding PPP on interface cp0
>
>         --== Initialization Complete ==--
>
> -*> Snort! <*-
> Version 1.8.7 (Build 128)
> By Martin Roesch (roesch () sourcefire com, www.snort.org)
> ^C
>
> ===============================================================================
> Snort analyzed 0 out of 316 packets, The kernel dropped 0(0.000%) packets
>
> Breakdown by protocol:                Action Stats:
>     TCP: 0          (0.000%)          ALERTS: 0
>     UDP: 0          (0.000%)          LOGGED: 0
>    ICMP: 0          (0.000%)          PASSED: 0
>     ARP: 0          (0.000%)
>    IPv6: 0          (0.000%)
>     IPX: 0          (0.000%)
>   OTHER: 0          (0.000%)
> DISCARD: 0          (0.000%)
> ===============================================================================
> Fragmentation Stats:
> Fragmented IP Packets: 0          (0.000%)
>     Fragment Trackers: 0
>    Rebuilt IP Packets: 0
>    Frag elements used: 0
> Discarded(incomplete): 0
>    Discarded(timeout): 0
>   Frag2 memory faults: 0
> ===============================================================================
> TCP Stream Reassembly Stats:
>         TCP Packets Used: 0          (0.000%)
>          Stream Trackers: 0
>           Stream flushes: 0
>            Segments used: 0
>    Stream4 Memory Faults: 0
> ===============================================================================
> Snort received signal 2, exiting
>
> Can anyone help me??? I dont know what happening!
>
>
>
> --
>                  mailto:h-k () mail ru
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users