Hi Florin, my snort doesn't start an i have the following error in my syslog: ------------------------------------------------------------------ Jan 11 21:58:56 router kernel: device ppp0 entered promiscuous mode Jan 11 21:58:56 router snort: Initializing daemon mode Jan 11 21:58:56 router snort: PID path stat checked out ok, PID path set to /var/run/snort Jan 11 21:58:56 router snort: Writing PID "32740" to file "/var/run/snort/snort_ppp0.pid" Jan 11 21:58:56 router snort: FATAL ERROR: unknown preprocessor "8�^[^H_decode" Jan 11 21:58:56 router kernel: device ppp0 left promiscuous mode Jan 11 21:58:56 router snortd: snort Start succeeded ----------------------------------------------------------------------
The last Message tells about a good start but there is no snort process and and the status of the service is: ---------------------------------------------------------------------- [EMAIL PROTECTED] /]# service snortd status Der Dienst �snort� ist tod, aber die Systemkomponente blockiert -------------------------------------------------------------------- in english something like The service is death but the systemcomponents are locked. I think there is something wrong in the config for the preprocessors. It looks like entries for the old snort not for the snort >= 2.x The installed package are snort-2.1.0-2mdk.i586.rpm from today at your side. Regards, Dieter
signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil
