On Tue, 2005-03-15 at 13:13 -0800, Ross Boylan wrote: > On Tue, 2005-03-15 at 21:32 +0100, Javier Fernández-Sanguino Peña wrote: > > On Tue, Mar 15, 2005 at 10:32:59AM -0800, Ross Boylan wrote: > > > Also, the NEWS.Debian file refers to /etc/snort/common.parameters. > > > The correct file name is /etc/snort/snort.common.parameters. > > > That name is given correctly by the installation script. > > (...) > > > > Does this sound better? > > > > * The snort package, Since version 2.3.0, introduces /etc/default/snort > > and no longer uses /etc/snort/snort.common.parameters. > Snort Version 2.3.0 and later > deprecate /etc/snort/snort.common.parameters, > preferring /etc/default/snort. > [rationale: the startup script actually does use snort.common.parameters > if present] Even my revision is misleading: literally, the startup script prefers the old config file, using it if present. How about ...
In snort version 2.3.0 and later the preferred configuration method uses /etc/default/snort rather than /etc/snort/snort.common.paramenters. The new approach takes advantage of the improvements introduced in the init.d script. such as sanity checks for common misconfigurations. Upgrading automatically generates /etc/default/snort from /etc/snort/snort.common.paramenters. Since the automatically generated file may not be correct, you should inspect it or create a new version to your liking. If it is OK, delete /etc/snort/snort.common.parameters and restart the server to use the new file.
