[Snort-devel] unsock output

From: Alan Milligan <alan(at)balclutha.org>
Date: Wed Mar 17 2004 - 23:38:04 EST

People,

I found my problem with my unixsocket output - there was a simple permissions problem with the process creating the socket not making it writeable by the snort user.

Well actually, I think most of the output files are created by the real user before doing the setuid :(

I would suggest logging a bad return code from the sendto as the default behaviour - which is presently to silently ignore. This of course could potentially mean a busy syslogd until the issue was resolved ...

If the powers that be agree, I can furnish the patch.

Cheers, Alan

---

This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click

---

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel Received on Wed Mar 17 23:44:29 2004