Re: how to run snort from different linux directories

["Nathaniel Richmond" <nate+snort () richmond-family org>]

By the look of it, you're running as a normal user when it fails,
and root when it succeeds. Snort can't open the interface in
promiscuous mode if you're not running with root privileges.

David Kingsly wrote:
> I am running into some problems trying to activate snort.  I seem to
> be
> able to run it fine from my Ubuntu's /usr/src/snort/snort-2.8.3.2
> and /etc/snort directory, but when I try to run it from
> /usr/local/bin,
> I get the fullowing error message:
> @thunder:/usr/local/bin$ snort -v
> Running in packet dump mode
>
>         --== Initializing Snort ==--
> Initializing Output Plugins!
> Verifying Preprocessor Configurations!
> ERROR: Failed to lookup for interface: no suitable device found.
> Please
> specify one with -i switch
> Fatal Error, Quitting..
>
>
> Here is what it looks like when I run it successfully:
> root@thunder:/etc/snort# snort -v
> Running in packet dump mode
>
>         --== Initializing Snort ==--
> Initializing Output Plugins!
> Verifying Preprocessor Configurations!
> ***
> *** interface device lookup found: eth0
> ***
>
> Initializing Network Interface eth0
> Decoding Ethernet on interface eth0
>
>         --== Initialization Complete ==--
>
>    ,,_     -*> Snort! <*-
>   o"  )~   Version 2.8.3.2 (Build 22)
>    ''''    By Martin Roesch & The Snort Team:
> http://www.snort.org/team.html
>            (C) Copyright 1998-2008 Sourcefire Inc., et al.
>            Using PCRE version: 7.8 2008-09-05
>
> Not Using PCAP_FRAMES
>
>
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users