Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort
Snort News Downloads Snort Docs Rules Snort Community Snort Forums Snort Training
Search Site
Search Rules
Account
email
password
not registered?
user preferences

Snort Forums Archive

Archive Home » Third Party Tools » Unable to open Portscan event file

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Unable to open Portscan event file


Posted by dimerbag on May 10, 2005 01:52:22

I use ACID and when I want to display the portscan events I have the following error :
PORTSCAN EVENT ERROR: Unable to open Portscan event file '/var/log/snort/portscan.log'

If I copy the portscan.log file in the acid directory it works...
yet the permissions are the same
I also tried to change the permission (chmod 777) and the owner to www-data (user who execute apache) but the error remain.

any idea ?

thanks


Clem

Posted by SecureIdeas on May 12, 2005 09:08:41

Verify that the web server user has execute rights to the directories that lead to the portscan file. If it does not, it will prevent ACID from reading the file.

Kevin
site feedback | Terms of Use | Privacy Policy | forum archives ©2008 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved.