Quoting Michael D. Schleif <[EMAIL PROTECTED]>: [snip] > However, I *cannot* start snort! It is not running and I do not know > how to debug this one. > > What do you think? >
First check the syslogs for any errors. Some will get logged, some will just quietly kill Snort. If that doesn't help, start Snort directly in IDS mode and without detaching into the background. You will have to RTFM for the options, I have to leave for a meeting now, and the last time I did this is not in root's .history any more. HTH, Jeffrey -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]