LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 03-15-2009, 01:00 PM   #1
JayCool
LQ Newbie
 
Registered: Mar 2009
Posts: 3

Rep: Reputation: 0
[HELP]SNORT PROBLEMS(IDS)-service snort start


when i start the snort service i encounter the problem as shown below:


$service snort start
Starting snort: [FAILED]
(log to /var/log/snort with configfile /etc/snort/snort.config)


any one can help me please?

HELP!!!
 
Old 03-15-2009, 01:01 PM   #2
repo
LQ 5k Club
 
Registered: May 2001
Location: Belgium
Distribution: Linux Mint
Posts: 8,516

Rep: Reputation: 896Reputation: 896Reputation: 896Reputation: 896Reputation: 896Reputation: 896Reputation: 896
take a look in
/var/log/snort
for error messages
 
Old 03-15-2009, 01:05 PM   #3
JayCool
LQ Newbie
 
Registered: Mar 2009
Posts: 3

Original Poster
Rep: Reputation: 0
i already check but there is nothing in /var/log/snort.
 
Old 03-15-2009, 01:12 PM   #4
repo
LQ 5k Club
 
Registered: May 2001
Location: Belgium
Distribution: Linux Mint
Posts: 8,516

Rep: Reputation: 896Reputation: 896Reputation: 896Reputation: 896Reputation: 896Reputation: 896Reputation: 896
which distribution are you using?
how did you installed snort
 
Old 03-15-2009, 01:21 PM   #5
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,543
Blog Entries: 54

Rep: Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924Reputation: 2924
Also note Snort comes with a "test" commandline switch you might want to use to check your config. And while Snort may have a security context wrt usage your question has not: it is about application configuration. therefore this thread will be moved to the Linux Software forum.
 
Old 03-15-2009, 01:34 PM   #6
JayCool
LQ Newbie
 
Registered: Mar 2009
Posts: 3

Original Poster
Rep: Reputation: 0
which distribution are you using?
how did you installed snort

i use ...

tar -zxvf snort-2.8.3.2.tar.gz
cd snort-2.8.3.2
./configure --with-mysql --enable-dynamicplugin
make
make install
groupadd snort
useradd -g snort snort –s /sbin/nologin
mkdir /etc/snort/rules
mkdir /var/log/snort
cd etc/
cp * /etc/snort

vi snort.conf (file is located in /etc/snort)

var HOME_NET 10.0.0.0/24
var EXTERNAL_NET !$HOME_NET
var RULE_PATH /etc/snort/rules

output database: log, mysql, user=snort password=<snort123>
dbname=snort host=localhost

wget http://internetsecurityguru.com/snortinit/snort
chmod 755 snort

chkconfig snort on
service snort start
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How to setup snort IDS saini_mw Linux - Security 2 05-15-2006 08:46 AM
developing an ids using snort chax Linux - Networking 1 01-10-2006 12:51 PM
Snort/ACID as an IDS WeNdeL Linux - Security 4 09-10-2004 01:14 PM
I want to start Snort as a service/daemon Olusegun Linux - Software 3 10-15-2002 11:35 AM
snort (ids) not working please help!!! crealkillerI75 Slackware 5 07-18-2002 04:39 PM


All times are GMT -5. The time now is 03:42 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration