snort runlevel problem
 

Hi all

I have a problem with snort. I installed it on Suse 9.1 with acid for sniffing the network......

It works nearly everything ^^

I have the problem with starting snort automaticly after rebooting the machine.
the runlevels are right (2,3,5) and it works if I have some options i dont want (not sure) to have in my start syntax :S ^^ .... manualy starting works everytime ... but I need it automaticly

the rcsnort start script starting snort with this syntax:
/usr/local/bin/snort -d -D -i eth0 -l /var/log/snort -u snort -g snort -c /etc/snort/etc/snort.conf -dev

it dont work :/

with this syntax it works automaticly:
/usr/local/bin/snort -d -D -i eth0 -l /var/log/snort -u snort -g snort -c /etc/snort/etc/snort.conf -dev -A fast


strange ?? why that .... and I`m not sure .. thatfor can I use the options
"-A fast" ?? ... I read that it makes the network faster and it makes less alerts ... but is that what I want ? I have my rules to choise wich packets alerts make ? or not ?

Thx for help !!!

rofl I fixed the problem ^^

the problem was in the runlevel.
snort was starting bevor mysql started and snort couldent connect to the database ...
so I had never problems to start it manualy ...

just did snort behind mysql in the runlevel ... now everything works :D



post can be closed ;) thx