# Config file for /etc/init.d/snort # This tell snort which interface to listen on (any for every interface) IFACE=eth0 # Make sure this matches your IFACE PIDFILE=/var/lib/snort/snort_$IFACE.pid # You probably don't want to change this, but in case you do LOGDIR="/var/log/snort" # Probably not this either CONF=/etc/snort/snort.conf # Allow log files to be read by members of snort group (default is 077). UMASK=037 # This pulls in the options above SNORT_OPTS="-D -u snort -i $IFACE -l $LOGDIR -c $CONF -m $UMASK"