I have recently installed Snort IDS on Linux Ubuntu 16.04LTS (not server), after experimenting and testing configuration in VitualBox.
After installing and successfully validating the configuration file with command:
sudo snort -T -c /etc/snort/snort.conf
I run the IDS as an instance using the following command, confirming that it is operating with the custom rule-set that I supplied.
sudo snort -A console -i wlp4s0 -u snort -g snort -c /etc/snort/snort.conf
When I close the instance and lunch snort properly using
sudo service snort start, no errors are encountered, however the output of
/var/log/snort/snort.log is an unrecognizable series of symbols that I would ordinarily relate to an unrecognized formatting error:
��p���Z� !"#$%&'()*+,-./01234567h<Z�� ���:�D��~Z��Z�� �b��(�M�,03��ET2(t�:�D��ns���Z��,b��(�M�,03��ET2(t�:�D����wL��Z�� !"#$%&'()*+,-./01234567h<Z�V�R��:�D��~Z�VZ�V�Rb��(�M�,03��ET2(t�:�D��L�
Can anyone explain how this is occurring (especially considering the lack of Snort errors), and suggest how to fix this to make the logging legible?
Thanks in advance.