The /etc/sysconfig/snort script uses a CONF variable that points to the
/etc/snort/snort.conf file:
# Where is Snort's configuration file?
# -c {/path/to/snort.conf}
CONF=/etc/snort/snort.conf
The start option in /etc/init.d/snortd is making use of the $CONF
variable in the command line that starts snort. Should it not then make
use of the output plugin configuration information in the snort.conf file?
At the end of the day, I can remove the RPM and install from source, but
I had hoped I could shortcut it somewhat :)
John
Patrick S. Harper wrote:
look at the init script, if i remember right it does not use
/etc/snort/snort.conf if you install from RPM. I think it uses
something in /etc/sysconfig. but it has been a while. I love RPM's for
system management but snort is one of those things i would rather
compile for each system personally.
John Messinger wrote:
Joel,
That's the funny thing. It seems to be running fine in daemon mode.
This is the syslog output I get when starting it up via the
/etc/init.d script:
-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
