Clicky

I am testing Snort 2.9.0.5 and have installed in on a 64 Bit Ubuntu 10.04 LTS Server according to the guide at this link.  http://www.snort.org/assets/158/011-snortinstallguide2905.pdf   The install appeared to go well up to the point where I was to change some config options in the /usr/local/snort/etc/snort.conf file.  Problem is that I cannot find the file. Actually the /usr/local/snort directories are there but the /etc is not and there is no config file.  I cannot find what I have done wrong.

I'm not sure if this is related, but while researching this problem I did see on another thread there was an issue where the user was trying to install Snort on a 64-Bit system and was directed to change the server to a 32-bit install....  Will Snort run on a 64-bit system, or do I need to reload on a 32-bit system?



asked 08/20/2011 08:44

dwar08's gravatar image

dwar08 ♦♦


11 Answers:
/usr/local/etc ?
link
gheist's gravatar image

gheist

No it's not there either...  When I try to start the application it errors out telling me it cannot find the config file and it is looking for it in the /usr/local/snort/etc directory...  
link
dwar08's gravatar image

dwar08

seems a 64bit problem, I already have this problem to and I need to reback to 32bit.

But try snort support
http://forums.snort.org/forums/support
or
http://groups.google.com/group/snortusers?hl=en
link
abolinhas's gravatar image

abolinhas

Your instructions (if you ever read them) mentions /usr/local/etc/snort.conf
You can choose to install snort from Universe, which might be easier for "just to try"
link
gheist's gravatar image

gheist

gheist..
My instructions, which came from the snort.org site, (and I have read them) do not mention /usr/local/etc/snort.conf as you suggest  They do however mention  /usr/local/snort/etc/snort.conf  multiple times.  But it doesn't really matter as the file is not in either location....
I appreciate the suggestion to install from Universe, but I prefer to do my testing as the system(s) will be implemented.

abolinhas..
Thanks, for your input.  I have found some promising info at the snortusers google forum and am following up on that.  The file was generated in the install directory and I'm told that I need to move it and all the other files in the /etc directory there to  /usr/local/snort/etc  I'll give that a shot when I get a chance.
link
dwar08's gravatar image

dwar08

Thank you for reading 2nd page of install guide behind the link you posted of a pdf file on a snort site.......
link
gheist's gravatar image

gheist

Through another forum I found that the snort.conf file was created in the install directory.  I wasn't able to determine why it was there, instead of where the install document expected it to be.. (ie. /usr/local/snort/etc/snort.conf).   I was instructed to move it and the other files in that /etc directory to the /usr/local/snort/etc directory.  
I was then able to edit the file as needed.....
link
dwar08's gravatar image

dwar08

I've requested that this question be closed as follows:

Accepted answer: 0 points for dwar08's comment http:/Q_27267044.html#36441432

for the following reason:

Solution was found on another forum..
link
dwar08's gravatar image

dwar08

Does not make much sense
Install doc refers to /usr/local/etc/snort.conf
link
gheist's gravatar image

gheist

The install doc I posted does not refer to /usr/local/etc/snort.conf anywhere in the document.
It does refer to /usr/local/snort/etc/snort.conf
link
dwar08's gravatar image

dwar08

All,

This thread has been reviewed by at least one moderator, and the decision has been made to restart the Auto Close process.  

Restarting the original Auto Close process.

JustAMod
Community Support Moderator
link
JustAMod's gravatar image

JustAMod

Your answer
[hide preview]

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Tags:

×6
×38
×10
×1

Asked: 08/20/2011 08:44

Seen: 405 times

Last updated: 09/01/2011 09:19