Prev: Tips for compiling VirtualBox OSE on lenny
Next: Debian Lenny, apache2, ldaps to active directory
From: Jari Fredriksson on 19 Feb 2010 10:40

aptitude install snort

will not create /etc/snort.conf nor the rule files in /etc/snort/rules

If I think that it should, am I wrong?

Debian Lenny 32-bit with backports.

--
http://www.iki.fi/jarif/

Consider well the proportions of things. It is better to be a young
June-bug
than an old bird of paradise.
-- Mark Twain, "Pudd'nhead Wilson's Calendar"

From: Jordan Metzmeier on 19 Feb 2010 11:10
Sounds like you want the package snort-rules-default. This is in the
Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get
familiar with searching the /usr/share/doc directory for information
such as this.


Jordan Metzmeier

On Fri, Feb 19, 2010 at 10:32 AM, Jari Fredriksson <jarif(a)iki.fi> wrote:
>
> aptitude install snort
>
> will not create /etc/snort.conf nor the rule files in /etc/snort/rules
>
> If I think that it should, am I wrong?
>
> Debian Lenny 32-bit with backports.
>
> --
> http://www.iki.fi/jarif/
>
> Consider well the proportions of things.  It is better to be a young
> June-bug
> than an old bird of paradise.
>                -- Mark Twain, "Pudd'nhead Wilson's Calendar"
>
>


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
Archive: http://lists.debian.org/50e5edd51002190800j4e10a52eua9baa5a99304de8b(a)mail.gmail.com
From: Jari Fredriksson on 19 Feb 2010 12:40
On 19.2.2010 18:00, Jordan Metzmeier wrote:
> Sounds like you want the package snort-rules-default. This is in the
> Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get
> familiar with searching the /usr/share/doc directory for information
> such as this.
>
meta-package (?) snort loads this snort-rules-default, but nothing comes
in /etc/snort.

I even tried to load it manually (before asking here), but no joy.


>
> Jordan Metzmeier
>
> On Fri, Feb 19, 2010 at 10:32 AM, Jari Fredriksson <jarif(a)iki.fi> wrote:
>>
>> aptitude install snort
>>
>> will not create /etc/snort.conf nor the rule files in /etc/snort/rules
>>
>> If I think that it should, am I wrong?
>>
>> Debian Lenny 32-bit with backports.
>>


--
http://www.iki.fi/jarif/

You are dishonest, but never to the point of hurting a friend.

From: Jari Fredriksson on 19 Feb 2010 13:00
On 19.2.2010 19:33, Jari Fredriksson wrote:
> On 19.2.2010 18:00, Jordan Metzmeier wrote:
>> Sounds like you want the package snort-rules-default. This is in the
>> Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get
>> familiar with searching the /usr/share/doc directory for information
>> such as this.
>>
> meta-package (?) snort loads this snort-rules-default, but nothing comes
> in /etc/snort.
>
> I even tried to load it manually (before asking here), but no joy.
>
>

Ok, I commanded aptitude install snort on an another machine, and it
worked! Copied the /etc/snort from there.


>>
>> Jordan Metzmeier
>>
>> On Fri, Feb 19, 2010 at 10:32 AM, Jari Fredriksson <jarif(a)iki.fi> wrote:
>>>
>>> aptitude install snort
>>>
>>> will not create /etc/snort.conf nor the rule files in /etc/snort/rules
>>>
>>> If I think that it should, am I wrong?
>>>
>>> Debian Lenny 32-bit with backports.
>>>
>
>


--
http://www.iki.fi/jarif/

You are dishonest, but never to the point of hurting a friend.

From: Jordan Metzmeier on 19 Feb 2010 13:00
So you are saying you have installed the snort-rules-default package
but the /etc/snort/rules/ directory remains missing? Doing something
manually could cause dpkg to not write the config files (although I
have typically only seen this when you delete a config file installed
by a package and then attempt to reinstall).

If this is the case reinstall snort-rules-default with `aptitude -o
DPkg::Options::="--force-confmiss" reinstall snort-rules-default`. You
can view what config files should be present with `dpkg -L
snort-rules-default`

On Fri, Feb 19, 2010 at 12:33 PM, Jari Fredriksson <jarif(a)iki.fi> wrote:
> On 19.2.2010 18:00, Jordan Metzmeier wrote:
>> Sounds like you want the package snort-rules-default. This is in the
>> Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get
>> familiar with searching the /usr/share/doc directory for information
>> such as this.
>>
> meta-package (?) snort loads this snort-rules-default, but nothing comes
> in /etc/snort.
>
> I even tried to load it manually (before asking here), but no joy.
>
>
>>
>> Jordan Metzmeier
>>
>> On Fri, Feb 19, 2010 at 10:32 AM, Jari Fredriksson <jarif(a)iki.fi> wrote:
>>>
>>> aptitude install snort
>>>
>>> will not create /etc/snort.conf nor the rule files in /etc/snort/rules
>>>
>>> If I think that it should, am I wrong?
>>>
>>> Debian Lenny 32-bit with backports.
>>>
>
>
> --
> http://www.iki.fi/jarif/
>
> You are dishonest, but never to the point of hurting a friend.
>
>



--
Jordan Metzmeier


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
Archive: http://lists.debian.org/50e5edd51002190956q70f1becel40f803d90127ff14(a)mail.gmail.com
 |  Next  |  Last
Pages: 1 2
Prev: Tips for compiling VirtualBox OSE on lenny
Next: Debian Lenny, apache2, ldaps to active directory