Snort Forums Archive

Archive Home » General Chat » problems when running snort with rules

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

problems when running snort with rules

Posted by Sost on March 06, 2008 10:13:21

Hi everbody!!! After installing snort 2.7 rules, I tried to run snort in NIDS mode and everything went right till here:

--== Initialization Complete ==--

,,_ -*> Snort! <*-
o" )~ Version 2.7.0.1 (Build 36) i386
'''' By Martin Roesch & The Snort Team: http://www.snort.org/team.html
(C) Copyright 1998-2007 Sourcefire Inc., et al.

Rules Engine: SF_SNORT_DETECTION_ENGINE Version 1.6
Preprocessor Object: SF_SSH Version 1.0
Preprocessor Object: SF_SMTP Version 1.0
Preprocessor Object: SF_FTPTELNET Version 1.0
Preprocessor Object: SF_DNS Version 1.0
Preprocessor Object: SF_DCERPC Version 1.0
Not Using PCAP_FRAMES

Here the system seems to be waiting for an input.
Looks like it is something related to PCAP but it doe s not look very clear.

Thanks!!

Posted by Joel_Esler on May 07, 2008 15:04:15

If you got that far, that means snort started correctly. You started Snort in non-daemon mode.