no ps nao ta mostrando nada????? xiiii
olha no logs dele se ele ta iniciando certinho
Versão Imprimível
no ps nao ta mostrando nada????? xiiii
olha no logs dele se ele ta iniciando certinho
e agora?Citação:
Mar 9 15:28:48 firewall snort: Initializing daemon mode
Mar 9 15:28:48 firewall snort: PID path stat checked out ok, PID path set to /var/run/
Mar 9 15:28:48 firewall snort: Writing PID "18019" to file "/var/run//snort_eth0.pid"
Mar 9 15:28:48 firewall snort: Parsing Rules file /etc/snort/snort.conf
Mar 9 15:28:48 firewall snort: FATAL ERROR: ERROR /etc/snort/snort.conf(50): Couldn't resolve hostname ppp0
EXTERNAL_NET coloca any de novo e startei, agora apareceu isso
Citação:
Mar 9 15:33:27 firewall snort: Writing PID "18030" to file "/var/run//snort_eth0.pid"
Mar 9 15:33:27 firewall snort: Parsing Rules file /etc/snort/snort.conf
Mar 9 15:33:27 firewall snort: ,-----------[Flow Config]----------------------
Mar 9 15:33:27 firewall snort: | Stats Interval: 0
Mar 9 15:33:27 firewall snort: | Hash Method: 2
Mar 9 15:33:27 firewall snort: | Memcap: 10485760
Mar 9 15:33:27 firewall snort: | Rows : 4099
Mar 9 15:33:27 firewall snort: | Overhead Bytes: 16400(%0.16)
Mar 9 15:33:27 firewall snort: `----------------------------------------------
Mar 9 15:33:27 firewall snort: FATAL ERROR: /etc/snort/snort.conf(293) => Unable to open the IIS Unicode Map file '/etc/snort/unicode.map'.
ajeitei, agora ele ta rodando blz, so falta alguem me fala qual eh o parametro no snort.conf para ele so varre a interface ppp0
putz vc ta usando modem neh, volta teu external_net pra any....