Topic: Can't run snortd in daemon mode on SME 5.5

[Phil M]

Hello,
I have two SME v5.5 servers and have the problem on both of them. When I installed the rpm's I did use newer rpms for snort and libpcap. Here is what I installed:

ari-mitel-acid-1.0-11.noarch.rpm
libpcap-0.6.2-11.7.2.0.i386.rpm
snort-1.8.7-1snort.i386.rpm
snort-mysql-1.8.7-1snort.i386.rpm
trevor-mitel-guardian-1.0-2.noarch.rpm

In order to get snort to run I had to add:

var HTTP_PORTS 80
var ORACLE_PORTS 80

to the snort.conf file

snort will run from the command line as listed in snortd as long as I leave off the "-D"

Trying to run it in the background by using a "&" at the end does not work. The process dies when I close the ssh window.

Any ideas?

Thanks for your help,
Phil

[Jeff]

Is there a reason you used newer rpm's.   I am running on 5.5 and installed exactly per instructions for 5.12 as listed in how-to's and it is working great.