Also, the NEWS.Debian file refers to /etc/snort/common.parameters. The correct file name is /etc/snort/snort.common.parameters. That name is given correctly by the installation script.
Also, the install script message says "Until you do this, the init.d script will not use the new configuration and you will not take advantage of the benefits introduced in newer releases." In this case, I think the NEWS file is clearer that the *old* configuration is used. The install message left me with the impression that snort was disabled until I made the indicated changes. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]