Snort won’t start on 3 of my 6 interfaces. What’s the best way to start troubleshooting/which logs do I look at?
There are logs for each interface located under /var/log/snort that give you the reason. Google the reason for not starting and you will likely land on a page with the answer.