[H-GEN] I've broken Snort

[Harry Phillips]

[ Humbug *General* list - semi-serious discussions about Humbug and     ]
[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]

Cunningham, Conor wrote:
> Hello World,
> 
> 		How's tricks? I am currently running Smoothwall 2.0 as
> my router/gw to the outside world, and I use the SNORT daemon that comes
> with it. The other day I noticed that SNORT was not on, and after I
> looked at the various disks, I noticed the /var/log was completely full.
> So, in my wisdom, I went into /var/log and did a rm -rf ./snort
> 
> This I thought would alleviate the problem. So, after I did a mkdir
> snort I went to restart SNORT using the web interface, shock horror it
> didn't restart or show any signs of live for that matter.

What were the directory owner and group of the old /var/log/snort? Did 
you make sure they were the same after you recreated it?

> 
> I have done some research but I am not having much luck. If anyone out
> there is a SNORT head and could help me out, then I'd be grateful.
> 

I have never used it but you could try removing and then re-installing 
snort.

-- 
Regards,
Harry Phillips
--- Failure is not an option,
     it comes bundled with your Microsoft product.


--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.  See http://www.humbug.org.au/