[Oisf-users] Disabled console logging but Suricata still outputs messages

Peter Manev petermanev at gmail.com
Wed May 1 07:10:08 UTC 2013



On 30 apr 2013, at 19:04, Duarte Silva <duarte.silva at serializing.me> wrote:

> Hi all,
> 
> I have disabled the console output and enabled the file output, but while I'm 
> starting suricata using a init script I still get output from it.
> 
> # /etc/init.d/suricata start
> Starting Suricata IDS (suricata): 30/4/2013 -- 17:43:56 - <Info> - This is 
> Suricata version 1.4.1 RELEASE
> 30/4/2013 -- 17:43:56 - <Info> - CPUs/cores online: 2
> 30/4/2013 -- 17:43:56 - <Info> - Found an MTU of 1500 for 'eth1'
>                                                           [  OK  ]
> 
> The init script start function is the following:
> 
> start() {
>        echo -n $"Starting $desc ($prog): "
>        SURICATA_OPTS="-D -c /etc/suricata/suricata.yaml --pidfile 
> /var/lock/subsys/$prog --af-packet eth0 --user suri --group suri"
>        daemon $prog $SURICATA_OPTS
>        RETVAL=$?
>        echo
>        [ $RETVAL -eq 0 ] && touch /var/lock/subsys/$prog
>        return $RETVAL
> }
> 
> Output configuration in Suricata:
> 
>  - console:
>      enabled: no
>  - file:
>      enabled: yes
>      filename: /var/log/suricata/suricata.log
> 
> Thanks in advance for any tips, best regards,
> Duarte Silva
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/


Hi, 
Have you tried using upstart?
Thanks

Regards,
Peter Manev


More information about the Oisf-users mailing list