Re: Snort unable to initialize prelude client

On Tue, 21 Aug 2007 10:20:17 +0200, "Sebastien
Tricaud" <sebastien.tricaudgmail.com> wrote:
> Jason wrote:
>>
>> I went ahead and re-registered the snort sensor
profile with the
> following command, it returned success.  Same error
upon starting Snort.
> 
> 
> Can you please provide a "strace -e open
snort" ?

Link to ktrace/kdump sent offlist.  If anyone else wants it,
please let me know.

-- 
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net

_______________________________________________
Prelude-user site list
Prelude-userprelude-ids.org
http://www.prelude-ids.org/mailman/listinfo/prelude-user

Jason,

I can see that in your kdump:

 17457 snort    NAMI 
"/etc/prelude/profile/snort/key"
 17457 snort    RET   open -1 errno 13 Permission denied

Maybe erasing the /etc/prelude/profile/snort and register
again would
be enough to solve your problem.


On 8/21/07, Jason Dixon <jasondixongroup.net> wrote:
> On Tue, 21 Aug 2007 10:20:17 +0200, "Sebastien
Tricaud" <sebastien.tricaudgmail.com> wrote:
> > Jason wrote:
> >>
> >> I went ahead and re-registered the snort
sensor profile with the
> > following command, it returned success.  Same
error upon starting Snort.
> >
> >
> > Can you please provide a "strace -e open
snort" ?
>
> Link to ktrace/kdump sent offlist.  If anyone else
wants it, please let me know.
>
> --
> Jason Dixon
> DixonGroup Consulting
> http://www.dixongroup.net
>
> _______________________________________________
> Prelude-user site list
> Prelude-userprelude-ids.org
> http://www.prelude-ids.org/mailman/listinfo/prelude-user

>
_______________________________________________
Prelude-user site list
Prelude-userprelude-ids.org
http://www.prelude-ids.org/mailman/listinfo/prelude-user