6301 2005-03-22 19:52:00 +0300 snort can not bind to interface other than eth0 2008-02-18 10:46:31 +0300 1 1 4 Development Sisyphus snort unstable all Linux CLOSED FIXED P2 major --- 1 dor vserge oddity sem qa-sisyphus oldest_to_newest 22705 0 dor 2005-03-22 19:52:00 +0300 snort can not bind to interface other than eth0 -- even if "any" requested. This patch should be applied to /etc/rc.d/init.d/snortd: --- snortd 2003-08-27 23:29:58 +0300 +++ snortd.dor 2005-03-22 17:36:50 +0200 @@ -36,7 +36,8 @@ --expect-user snort -- \ snort -u snort -g snort \ -t /var/log/snort \ - $(eval echo $(echo \$`echo ADDPARAMS_$i`)) + $(eval echo $(echo \$`echo ADDPARAMS_$i`)) \ + -i $i RETVAL=$? if [ $RETVAL != 0 ]; then return $RETVAL Steps to Reproduce: 1. Install snort 2. Edit /etc/sysconfig/snort and change INTERFACES=any to INTERFACES=eth1, ADDPARAMS_any to ADDPARAMS_eth1 3. issue `service snortd start' Actual Results: snort will bind to eth0 and write its PID to "/var/run//snort_eth0.pid" Expected Results: :-) 63433 1 dottedmag 2008-02-15 18:51:53 +0300 Починилось ли за почти три года? 63966 2 dor 2008-02-18 10:37:08 +0300 Думаю, давно :-) Не проверял; у меня именно там -- именно тот snort до сих пор. 63967 3 dottedmag 2008-02-18 10:46:31 +0300 Посмотрел в init.d/snortd - и вправду починено. Закрываю.