On Sunday 22 October 2006 15:26, Turi Tropea wrote: > hi guys, > i'm new to this list, i'm graduating in computer science engineering and > this is my first thread :) > but above all i'm ITALIAN :) > > i've a problem with a fresh intallation of snort > when i try to start the daemon with "/etc/init.d/snort start" it's fail > > > darkbox turitropea # cat /var/log/messages | grep "snort" > > Oct 21 01:05:33 darkbox groupadd[32177]: new group: name=snort, GID=450 > > Oct 21 01:05:33 darkbox useradd[32216]: new user: name=snort, UID=109, > > GID=450, home=/dev/null, shell=/usr/sbin/nologin Oct 21 01:21:09 darkbox > > snort: FATAL ERROR: User "sguil" unknown Oct 21 02:20:32 darkbox snort: > > FATAL ERROR: User "sguil" unknown Oct 21 03:16:03 darkbox snort: *** *** > > interface device lookup found: wifi0 *** Oct 21 03:16:03 darkbox snort: > > Uh, you need to tell me to do something... :No such file or directory > > Oct 21 03:16:23 darkbox snort: FATAL ERROR: User "sguil" unknown Oct 21 > > 03:24:46 darkbox snort: FATAL ERROR: User "sguil" unknown Oct 21 03:25:34 > > darkbox rc-scripts: WARNING: snort has not yet been started. Oct 21 > > 03:25:37 darkbox snort: FATAL ERROR: User "sguil" unknown Oct 22 14:40:33 > > darkbox snort: FATAL ERROR: User "sguil" unknown > > also i've used this guide to do all > http://forums.gentoo.org/viewtopic-t-399801.html (Your guide to snort, > mysql, apache, php, and BASE for Gentoo)
That guide doesn't mention sguil so I guess it's safe to turn it off. echo "net-analyzer/snort -sguil" >> /etc/portage/package.use -- gentoo-user@gentoo.org mailing list
