On Aug 28, 2007, at 5:49 AM, Alexandre Anriot wrote:
On Mon, Aug 27, 2007 at 11:38:56PM -0700, Darren Spruell wrote:
I'm encountering some strange problems using the
snort-2.6.0.2p1-prelude package on 4.1/i386.
My startup command for Snort is:
/usr/local/bin/snort -D -c /etc/snort/snort.conf -u _snort -g _snort
-l /var/snort/log -h 10.0.1.2/32
if launched from root's home directory, I recieve an error:
ERROR: Unspecified source: Unable to initialize the Prelude library:
Permission denied.
Fatal Error, Quitting..
# echo $?
1
I think that jdixon has reported the same problem, try to change the
permissions of /var/run/prelude-manager/ (i.e. 770 with _snort in the
_prelude group).
Even after you fix permissions, I think you will still hit another
unresolved error with the old net/snort. I had an initial patch from
someone on the prelude-users group. It worked fine once... then it
stopped working after an unrelated system crash.
Short story, don't use the existing snort in ports. I've been
updating the port to Snort-2.7.0.1 and will have it out to the list
today. I'm currently building/testing it on alpha, but there might
be some hurdles left with sparc64. It has already been tested on
i386 and fixes the startup problems with the prelude FLAVOR.
---
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net
