1 |
Hi, |
2 |
snort ebuild doesn't have ppc keyword but works okay on my PPC. |
3 |
There was 2 little errors which i guess are also on the x86 side: |
4 |
the user snort run as is nobody but should be snort in |
5 |
/etc/conf.d/snort, and the log directory /var/log/snort (by default) is |
6 |
not automatically created nor by snort, nor by the ebuild. |
7 |
Also in /etc/conf.d/snort, snort does not listen on every interface by |
8 |
default, so may be changing the last line by: |
9 |
# This pulls in the options above |
10 |
SNORT_OPTS="-D -s -u snort -i any -dev -l $LOGDIR -h $NETWORK -c $CONF" |
11 |
would be wise |
12 |
|
13 |
or |
14 |
|
15 |
# This tell snort which interface to listen on (any for every interface) |
16 |
IFACE=eth0 |
17 |
|
18 |
# This pulls in the options above |
19 |
SNORT_OPTS="-D -s -u snort -i $IFACE -dev -l $LOGDIR -h $NETWORK -c |
20 |
$CONF" |
21 |
|
22 |
|
23 |
|
24 |
kang |