LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 03-15-2009, 12:00 PM   #1
JayCool
LQ Newbie
 
Registered: Mar 2009
Posts: 3

Rep: Reputation: 0
[HELP]SNORT PROBLEMS(IDS)-service snort start


when i start the snort service i encounter the problem as shown below:


$service snort start
Starting snort: [FAILED]
(log to /var/log/snort with configfile /etc/snort/snort.config)


any one can help me please?

HELP!!!
 
Old 03-15-2009, 12:01 PM   #2
repo
LQ 5k Club
 
Registered: May 2001
Location: Belgium
Distribution: Arch
Posts: 8,529

Rep: Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899
take a look in
/var/log/snort
for error messages
 
Old 03-15-2009, 12:05 PM   #3
JayCool
LQ Newbie
 
Registered: Mar 2009
Posts: 3

Original Poster
Rep: Reputation: 0
i already check but there is nothing in /var/log/snort.
 
Old 03-15-2009, 12:12 PM   #4
repo
LQ 5k Club
 
Registered: May 2001
Location: Belgium
Distribution: Arch
Posts: 8,529

Rep: Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899
which distribution are you using?
how did you installed snort
 
Old 03-15-2009, 12:21 PM   #5
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Also note Snort comes with a "test" commandline switch you might want to use to check your config. And while Snort may have a security context wrt usage your question has not: it is about application configuration. therefore this thread will be moved to the Linux Software forum.
 
Old 03-15-2009, 12:34 PM   #6
JayCool
LQ Newbie
 
Registered: Mar 2009
Posts: 3

Original Poster
Rep: Reputation: 0
which distribution are you using?
how did you installed snort

i use ...

tar -zxvf snort-2.8.3.2.tar.gz
cd snort-2.8.3.2
./configure --with-mysql --enable-dynamicplugin
make
make install
groupadd snort
useradd -g snort snort –s /sbin/nologin
mkdir /etc/snort/rules
mkdir /var/log/snort
cd etc/
cp * /etc/snort

vi snort.conf (file is located in /etc/snort)

var HOME_NET 10.0.0.0/24
var EXTERNAL_NET !$HOME_NET
var RULE_PATH /etc/snort/rules

output database: log, mysql, user=snort password=<snort123>
dbname=snort host=localhost

wget http://internetsecurityguru.com/snortinit/snort
chmod 755 snort

chkconfig snort on
service snort start
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to setup snort IDS saini_mw Linux - Security 2 05-15-2006 07:46 AM
developing an ids using snort chax Linux - Networking 1 01-10-2006 11:51 AM
Snort/ACID as an IDS WeNdeL Linux - Security 4 09-10-2004 12:14 PM
I want to start Snort as a service/daemon Olusegun Linux - Software 3 10-15-2002 10:35 AM
snort (ids) not working please help!!! crealkillerI75 Slackware 5 07-18-2002 03:39 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 03:37 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration