42

Chapter 2     Installing Snort and Getting Started

==========================================================

Snort analyzed 65 out of 65 packets, dropping 0(0.000%) 

packets

Breakdown by protocol:                Action Stats:

    TCP: 55         (84.615%)         ALERTS: 10        

    UDP: 10         (15.385%)         LOGGED: 10        

   ICMP: 0          (0.000%)          PASSED: 0         

    ARP: 0          (0.000%)

  EAPOL: 0          (0.000%)

   IPv6: 0          (0.000%)

    IPX: 0          (0.000%)

  OTHER: 0          (0.000%)

DISCARD: 0          (0.000%)

==========================================================

Wireless Stats:

Breakdown by type:

    Management Packets: 0          (0.000%)

    Control Packets:    0          (0.000%)

    Data Packets:       0          (0.000%)

==========================================================

Fragmentation Stats:

Fragmented IP Packets: 0          (0.000%)

    Fragment Trackers: 0         

   Rebuilt IP Packets: 0         

   Frag elements used: 0         

Discarded(incomplete): 0         

   Discarded(timeout): 0         

  Frag2 memory faults: 0         

==========================================================

TCP Stream Reassembly Stats:

        TCP Packets Used: 55         (84.615%)

         Stream Trackers: 1         

          Stream flushes: 0         

           Segments used: 0         

   Stream4 Memory Faults: 0         

==========================================================

Snort received signal 2, exiting

[root@conformix snort]#  

The above mentioned procedure runs Snort in the foreground and you don't get the

command prompt back. To run Snort in the background, you can use the  D command

line switch. In this case Snort still logs all of its information in the log directory  /var/

log/snort and you get the command prompt back. Note that when you installed

Snort using the pre compiled RPM package as explained earlier, you can run Snort using

the  /etc/init.d/snortd start  command that starts Snort in the background.