Thread: Help with Snort Script
i’m having problem snort script stopping anytime log server. when server boots, script loads , runs fine until log on update or whatever normal user. when try log off message "there stopped jobs" , base no longer show alerts. snort still collecting data, because when restart server see alerts after went down. here script:
code:#!/bin/bash /sbin/ifconfig eth1 /usr/local/bin/snort -dq -u snort -g snort -c \ /etc/snort/snort.conf -i eth1 /usr/local/bin/barnyard -c /etc/snort/barnyard.conf -g \ /etc/snort/gen-msg.map -s /etc/snort/sid-msg.map -d \ /var/log/snort -f snort.unified -w /etc/snort/bylog.waldo &
ok must have had else running, because script keeps running when first log out. guess need find command keep program running after close ssh session. regularly log in , stop snort , need keep running when start , log out.
Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [ubuntu] Help with Snort Script
Ubuntu
Comments
Post a Comment