Re: sending netlink message: Connection Refused

["Will Metcalf" <william.metcalf () gmail com>]

You must first load the ip_queue module if it is not already loaded.

modprobe ip_queue

Also what user are you running snort as?  You must run as root to
interact with ipqueue

Regards,

Will

On Tue, Sep 16, 2008 at 9:32 AM, Alberto Colosi/SI/RM/GSI/it
<alberto.colosi () sistinf it> wrote:
> hi, an information.
>
> while working snort 2.8.3 have stopped to log inside syslog.
>
> I have restarted my machine and I have restarted snort many times. It is
> inline compiled but not working in inline.
>
> After different tests I have runned it not in DAEMON mode and I got a
>         "sending netlink message:              Connection Refused"
>
> why it happened? I have changed nothing ....... or at least I think so. No
> other users could have changed anything becouse noone compile or configure
> anything there.
>
> Running snort without -Q, not reading from IPTABLES, it has started to work
> again.
>
> What's on??.
>
>
>
>
> -------------------------------
> Alberto Colosi
> IBM Global Business Services
> Sistemi Informativi S.P.A.
> IT NetWork & Security Department
> *-* *-* *-*
> SECURITY IS EVERYONE'S BUSINESS
>
> Member of
> IBM Information Security WW CoP
>
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great
> prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users