Re: installing snort
So you are saying you have installed the snort-rules-default package
but the /etc/snort/rules/ directory remains missing? Doing something
manually could cause dpkg to not write the config files (although I
have typically only seen this when you delete a config file installed
by a package and then attempt to reinstall).
If this is the case reinstall snort-rules-default with `aptitude -o
DPkg::Options::="--force-confmiss" reinstall snort-rules-default`. You
can view what config files should be present with `dpkg -L
snort-rules-default`
On Fri, Feb 19, 2010 at 12:33 PM, Jari Fredriksson <jarif@iki.fi> wrote:
> On 19.2.2010 18:00, Jordan Metzmeier wrote:
>> Sounds like you want the package snort-rules-default. This is in the
>> Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get
>> familiar with searching the /usr/share/doc directory for information
>> such as this.
>>
> meta-package (?) snort loads this snort-rules-default, but nothing comes
> in /etc/snort.
>
> I even tried to load it manually (before asking here), but no joy.
>
>
>>
>> Jordan Metzmeier
>>
>> On Fri, Feb 19, 2010 at 10:32 AM, Jari Fredriksson <jarif@iki.fi> wrote:
>>>
>>> aptitude install snort
>>>
>>> will not create /etc/snort.conf nor the rule files in /etc/snort/rules
>>>
>>> If I think that it should, am I wrong?
>>>
>>> Debian Lenny 32-bit with backports.
>>>
>
>
> --
> http://www.iki.fi/jarif/
>
> You are dishonest, but never to the point of hurting a friend.
>
>
--
Jordan Metzmeier
Reply to: