Re: Snort is exiting after start

[twig les <twigles () yahoo com>]

--- Daniel_Jagodziñski <daniel_jagodzinski () poczta onet pl>
wrote:
> I am starting snort from shell script located in
> /usr/local/etc/rc.d
> with the starting line like that
> .../snort -c /usr/local/etc/snort.conf -u snortd -g snortd -i
> rl0 -D
>
> user and group snortd exist. Snort is configured to use
> PostgreSQL and the
> database is present.
>
> The scripts is executed but just a while after snort is
> extiting with
> information Promisc... mode disabled.
>
> What is that I am doing wrong. Earlier I have the same
> starting line placed
> in /etc/rc.local but following suggestions of FreeBSD users
> moved it into
> script. When started from rc.local the snort was working.
> I have tried however to start it from the shell with similar
> results. Even
> if executed as root won't start
>
> System: FreeBSD 5.1, PostgreSQL 7.4.1, Snort 2.1.1
>
> Jan Pips

Two things you can try.  First is starting snort with the same
line but using -T instead of -D.  That usually tells me exactly
what I'm not doing right.  Also, on FBSD I usually have a "sleep
5" at the top of my starting snort script to make sure the
database finishes starting before snort tries to start.  There
is prolly a more graceful way to do this but this works.

=====
-----------------------------------------------------------
With a few exceptions, secrecy is deeply incompatible with
democracy and with science.
     --Carl Sagan  
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! Search - Find what you’re looking for faster
http://search.yahoo.com


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users