On Fri, Feb 22, 2013 at 08:19:04PM +0400, Wesley M.A. wrote: > >Please read /usr/local/share/doc/pkg-readmes/snort-2.9.4.0 for > >OpenBSD-specific Snort documentation. Specifically, the > >recommended way > >to start Snort is to use the /etc/rc.d/snort script. The rc.d(8) man > >page has information about rc.d scripts. > > > >Hope this helps, > >Lawrence > > You are very funny, i already read /usr/local/share/doc/pkg-readmes/*
I just wanted to make sure you didn't miss those docs. > And the same for : > Configure /etc/snort/snort.conf (HOME_NET, EXTERNAL_NET, > var...RULES) local.rules file > And put pkg_scripts="snort" in /etc/rc.conf.local and start it > manually with /etc/rc.d/snort start > > Therefore thank you for your trie. /etc/snort/snort.conf contains this line: config daq_dir: /usr/local/lib/daq/ So when you start Snort with the rc.d script, the rc.d script runs snort with -c /etc/snort/snort.conf, so it knows where to find the DAQ modules. If you want to use snort -v without using the config file: snort --daq-dir=/usr/local/lib/daq/ -v Lawrence
