Snort startup script for Ubuntu
Summary: Cisco Talos published an init script for Ubuntu that starts the Snort IDS/IPS daemon at boot, reading its configuration from /etc/snort/snort.conf and listening on eth0 with the arguments "-c $CONFIG -i $INTERFACE -qD". The script, authored by Nigel Houghton, uses start-stop-daemon for start, stop, and reload operations, and its notes instruct users to run update-rc.d to place the links and to chmod 0700 the installed script.
What you should know: The script hardcodes the interface as eth0 and the config path as /etc/snort/snort.conf, and its own notes say it may need changes before it works on your system - so a copied-and-pasted deployment can leave your IDS/IPS watching the wrong interface or failing to start.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026