Re: Running Snort

[Paul Schmehl <pauls () utdallas edu>]

--On Tuesday, January 04, 2005 08:59:58 AM -0800 S M <snort_mail () yahoo com> 
wrote:
> Hi,
> I am new to snort and was wondering if anyone could help me with a
> question i have.  I have a sensor at my house to play with for a course i
> am taking at school.  The sensor only sniffs when i enter the snort
> directory and type snort -D -i eth1, once i do this it works fine for
> about a day then it stops logging to my MySQL database.  Is there a limit
> to how long the sensor will run?

No.  It sounds like something syslogd-ish is stopping your daemon.

> Also i would like to make it so that
> the sensor will run like that when the machine is initally started, how
> do i do that?  I am somewhat new to unix as well but i understand the
> basics fairly well.
Which Unix?  It's kind of hard to answer the question without knowing the 
OS.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users