Hi all,
I dont know if i post this question on good mailing list, but i wish
it's the good list.
I have update my Freebsd's box on this week (Snort run for about 2 year
on it without problem's). After i restart the box's and snort can't load
correctly.
The only error i can see is on the /var/log/messages
It look like this;
Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
'realplayer.playlist' is checked but not ever set.
Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
'dce.bind.netware_cs' is checked but not ever set.
Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
'dce.bind.veritas' is set but not ever checked.
Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
'ms_sql_seen_dns' is checked but not ever set.
Dec 19 14:17:31 portableBS snort[27675]: Warning: flowbits key
'dce.isystemactivator.bind' is checked but not ever set.
Dec 19 14:17:31 portableBS snort[27675]: 248 out of 512 flowbits in
use.
Dec 19 14:17:31 portableBS snort[27675]: *** *** interface device
lookup found: rl0 ***
Dec 19 14:17:31 portableBS snort[27675]: Initializing daemon mode
Dec 19 14:17:31 portableBS snort[27676]: PID path stat checked out ok,
PID path set to /var/run/
Dec 19 14:17:31 portableBS snort[27676]: Writing PID "27676" to file
"/var/run//snort_rl0.pid"
Dec 19 14:17:31 portableBS snort[27675]: Daemon parent exiting
Dec 19 14:17:31 portableBS snort[27676]: Daemon initialized, signaled
parent pid: 27675
Snort dont start.
I have look to the conf file, found nothing with interest.
Some one can help me?
Francis Provencher
Ministère de la Sécurité publique du Québec
Direction des technologies de l'information
Tél: 1 418 646-3258
Courriel: Francis.provencher@Msp.gouv.qc.ca
CEH - Certified Ethical Hackers
SSCP - System Security Certified Practitionner
Sec+ - Security +
FRANCIS PROVENCHER.vcf
Description: Text document
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
