Koozali.org: home of the SME Server

snort-acid problem

acid snort

snort-acid problem
« on: June 13, 2002, 08:29:16 PM »
I ve just installed snort on my e-smith but it's like that it's not active... NOthing is logged et appear in the acid panel. I've had a look at the service (service snortd status) and i've found that it was unactive ! Whenever I activate it (service snortd start) the server say that it is ok but a service status check tell it is unactive again...

Thanks in advance for any help.

p nico

Re: snort-acid problem
« Reply #1 on: June 13, 2002, 08:30:05 PM »
lol my name is not snort acid :/
it is P. Nico ;)

Gary Parker

Re: snort-acid problem
« Reply #2 on: June 13, 2002, 09:05:05 PM »
Weird...I've just had exactly the same thing happen to me....installed as per the guide linked from the HOWTO pages with no problem but 'service snortd status' tells me the daemon isn't running. However, I got a friend to nmap me from a remote machine and it got picked up straight away and Guardian blocked his IP quite happily.

Gary

Ted

Re: snort-acid problem
« Reply #3 on: June 14, 2002, 02:56:42 AM »
That's because it doesn't use service...

doing a service snortd status won't return the correct result.

Try doing a "ps -ef | grep snort"

or a "ps -ef | grep guardian"