www.zeroshell.org Forum Index www.zeroshell.org
Linux Distribution for server and embedded devices
 
 SearchSearch  RegisterRegister  UsergroupsUsergroups 
 ProfileProfile  Log inLog in  Log in to check your private messagesPrivate Message 

snort installation does not work

 
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> Snort IDS
View previous topic :: View next topic  
Author Message
sbussi



Joined: 19 Sep 2008
Posts: 3

PostPosted: Sat Jan 16, 2010 3:41 pm    Post subject: snort installation does not work Reply with quote

Hi

first of all I have to thank Flavio for his great work on Zeroshell. We are running Zeroshell for 2 years in production now and had never any issues with it. Great box, great software.

Today I tried to install snort from the on-line updates folder but with no success.
First question to this is:
where can I find the installation logfile of snort?



Here is the output from the command line:


root@in001 DA12> ./install.sh -?
Reading configuration ...
Checking dependencies ...
Extracting packages ...
Running scripts ...
Starting updater process for the release 1.0.beta11b ...
--> Checking for installed updates:
[BA00] DansGuardian - True Web Content Filtering for All
[C100] Security FIX - Unauthenticated Remote Code Execution
[C105] OpenDNS dynamic updater
[C110] MRTG - Statistics
--> Replacing files ...
--> Patching files ...
--> Running scripts ...
Preparing DansGuardian...
Restarting administrative web interface ...
Stopping httpd daemon... [FAILED]
Starting httpd daemon...
(98)Address already in use: make_sock: could not bind to address 0.0.0.0:443
no listening sockets available, shutting down
Unable to open logs [FAILED]
Starting Captive Portal ...
--> Gateway disabled
--> Web Login Authentication Server started (12080-12081 tcp)
Stopping Dynamic DNS client daemon... [ OK ]
Starting Dynamic DNS client daemon... [ OK ]
Stopping MRTG ... [ OK ]
Starting MRTG ...
Daemonizing MRTG ... [ OK ]
Stopping httpd daemon... [ OK ]
Starting httpd daemon... [ OK ]
Syncing filesystem... Done
/sbin/service: line 6: /etc/rc.d/init.d/snort: No such file or directory
/sbin/service: line 6: exec: /etc/rc.d/init.d/snort: cannot execute: No such fil
e or directory
-----------------------------------------------------------------------------
Snort 2.8.5 has been installed. For information see the web site
http://www.snort.org
-----------------------------------------------------------------------------

- The file /var/register/system/snort/Interfaces contains the network
interfaces on which Snort captures the packets (default ETH00)

- The file /etc/snort.conf contains the configuration of Snort

- To restart Snort daemon use the command:

service snort restart

- To check the alerts use the Log Viewer of the web interface
in the section [snort]

root@in001 DA12>

Any help or ideas?

Best regards
Stephan
Back to top
View user's profile Send private message
ppalias



Joined: 17 Dec 2008
Posts: 1151
Location: Athens, Greece

PostPosted: Sun Jan 17, 2010 11:45 pm    Post subject: Reply with quote

Are you running ZS 1.0 beta11?
Back to top
View user's profile Send private message Yahoo Messenger MSN Messenger
sbussi



Joined: 19 Sep 2008
Posts: 3

PostPosted: Mon Jan 18, 2010 8:47 pm    Post subject: Reply with quote

Yes, I am running beta11.
Maybe that should be my problem. I will move to beta12 asap and will come here to tell you if my problem will be solved by beta12.
Thx for this hint.
Back to top
View user's profile Send private message
ppalias



Joined: 17 Dec 2008
Posts: 1151
Location: Athens, Greece

PostPosted: Tue Jan 19, 2010 7:36 am    Post subject: Reply with quote

Yup snort is supposed to be a patch for beta12, so trying it with beta11 might not work.
Back to top
View user's profile Send private message Yahoo Messenger MSN Messenger
lanshark



Joined: 05 Jul 2010
Posts: 1

PostPosted: Mon Jul 05, 2010 11:59 pm    Post subject: Snort not installing properly... Reply with quote

After installing per the instructions at http://www.zeroshell.net/eng/patch-details/#DA12, I receive the following:

/sbin/service: line 6: /etc/rc.d/init.d/snort: No such file or directory
/sbin/service: line 6: exec: /etc/rc.d/init.d/snort: cannot execute: No such file or directory
-----------------------------------------------------------------------------
Snort 2.8.5 has been installed. For information see the web site
http://www.snort.org
-----------------------------------------------------------------------------

- The file /var/register/system/snort/Interfaces contains the network
interfaces on which Snort captures the packets (default ETH00)

- The file /etc/snort.conf contains the configuration of Snort

- To restart Snort daemon use the command:

service snort restart

- To check the alerts use the Log Viewer of the web interface
in the section [snort]

There is no [snort] section of the Log Viewer, running the "service snort start" or "service snort restart" gives me the error
/sbin/service: line 6: /etc/rc.d/init.d/snort: No such file or directory
/sbin/service: line 6: exec: /etc/rc.d/init.d/snort: cannot execute: No such file or directory

I am running ZS 1.0.beta13. Where did I go wrong?

Thanks!

Jim
Back to top
View user's profile Send private message
ppalias



Joined: 17 Dec 2008
Posts: 1151
Location: Athens, Greece

PostPosted: Wed Jul 07, 2010 12:53 pm    Post subject: Reply with quote

There seems to be missing the
Code:
/sbin/service
file. I should add here that snort is for beta12, don't know if it has been tested on beta13.
Back to top
View user's profile Send private message Yahoo Messenger MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> Snort IDS All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group