HI:All

I use packetfence version 3.1.0.
I use inline mode.
I use net bridge and name br0.

BUT I find that violation faile.

packetfence.log have not any info about snort.

==============
 pfcmd(2513) INFO: generating /usr/local/pf/conf/snort.conf
(pf::services::generate_snort_conf)
Oct 22 07:49:59 pfcmd(2513) INFO: Starting snort with '/usr/sbin/snort -u
pf -c /usr/local/pf/var/conf/snort.conf -i br0 -N -D -l /usr/local/pf/var
--pid-path /usr/local/pf/var/run' (pf::services::service_ctl)
Oct 22 07:50:02 pfdetect(2576) INFO: pfdetect starting and writing 2621 to
/usr/local/pf/var/run/pfdetect.pid (pf::util::createpid)
Oct 22 07:50:02 pfdetect(2621) INFO: initialized (main::)
Oct 22 07:50:02 pfdetect(2621) INFO: listening on /usr/local/pf/var/alert
(main::)
Oct 22 07:50:03 httpd(0) DEBUG: instantiating new SwitchFactory object
(pf::SwitchFactory::new)
Oct 22 07:50:03 httpd(0) DEBUG: reading config file
/usr/local/pf/conf/switches.conf (pf::SwitchFactory::readConfig)
Oct 22 07:50:03 pfdhcplistener(2580) INFO: pfdhcplistener_br0 starting and
writing 2622 to /usr/local/pf/var/run/pfdhcplistener_br0.pid
(pf::util::createpid)
Oct 22 07:50:03 pfdhcplistener(2622) DEBUG: DHCP detector on an inline
interface (main::)
Oct 22 07:50:03 pfdhcplistener(2622) DEBUG: instantiating new pf::inline
object (pf::inline::new)
Oct 22 07:50:04 pfdhcplistener(2622) WARN: Unable to open VLAN proc
description for br0: No such file or directory (pf::util::get_vlan_from_int)
Oct 22 07:50:04 pfdhcplistener(2622) INFO: DHCP detector on br0 enabled
(main::)
Oct 22 07:50:04 pfmon(0) INFO: pfmon starting and writing 2623 to
/usr/local/pf/var/run/pfmon.pid (pf::util::createpid)
Oct 22 07:50:04 pfmon(1) INFO: Starting cleanup thread (main::cleanup)
===============

Snort do't write anything to /usr/local/pf/var/alert?


WHY? Thanks,


LQ

Attachment: pf.conf
Description: Binary data

Attachment: snort.conf
Description: Binary data

Attachment: violations.conf
Description: Binary data

------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_sfd2d_oct
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to