[olug] Snort Not Logging

Mac Petras mpetras at gmail.com
Mon Oct 25 18:22:56 UTC 2004


Ok all you Snort gurus out there...

I'm trying to troubleshoot a Snort box (RH 9, Snort 2.04, MySQL
4.0.16). I didn't build it (or break it for that matter), just trying
to get it to work.

Here's what I know so far:

1) Someone recently removed all the databases for snort and reinstalled Snort
2) Using eth0 in promiscuos more, no IP
3)  It has captured nothing to the database, However the alert log
file has data, but not since Aug 29th)

The  NICs are working, but no data is being captured....

Any thoughts on where to start? Troubleshooting order? etc?

Thanks!
Mac



More information about the OLUG mailing list