[ahb1@ahb1.ahb.de: Re: rc.local / snort startup help]

[Andreas Bihlmaier <andreas_(_dot_)_bihlmaier_(_at_)_gmx_(_dot_)_de>]

> Hello all:
hi
> 
> OBSD3.7
> 
> I am trying to start snort from rc.local with this entry
> 
> if [ -x /usr/local/bin/snort ]; then
>         echo -n ' starting snort...'
>         /usr/local/bin/snort -u sguil -g sguil -l /nsm/em0 -c
> /etc/snort/em0.snort.conf -U -A none -m 122 -i em0 -D
Is a EOL ('\n') here ?									-------^

If this is the case rewrite it as:
...
/usr/local/bin/snort -u sguil -g sguil -l /nsm/em0 -c \
/etc/snort/em0.snort.conf -U -A none -m 122 -i em0 -D
# 										THIS	------^


Just to try if this is the mistake comment out the snort stuff in rc.local and
run "/usr/local/bin/snort -u sguil -g sguil -l /nsm/em0 -c" if this gives you
the same "syntoms" ... there you go

have a nice day
ahb

# ... forgot to CC to misc ...