Snort mailing list archives
Re: Snort 2.8.6 Caught term signal?
From: "Andy Berryman" <aberryman () Cymtec com>
Date: Thu, 13 May 2010 09:13:22 -0500
I don't think logrotate is restarting it. I just looked at the logrotate.conf and there is nothing in there to restart snort. Does this mean anything? First time I've seen it too. But snort doesn't restart after this, just keeps on going. I've seen it twice this morning. May 13 13:11:27 (none) snort[31427]: *** Caught Alrm-Signal Thanks, Andy -----Original Message----- From: Edward Bjarte Fjellskål [mailto:edward.fjellskal () redpill-linpro com] Sent: Wednesday, May 12, 2010 5:29 PM To: Andy Berryman Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] Snort 2.8.6 Caught term signal? Andy Berryman wrote:
snort[28830]: Run time prior to being shutdown was 608465.830124 seconds
Thats about a week... Maybe logrotate with postrotate that restarts snort? Just a guess :) E ************************************************************************************************************************************************ My snort keeps restarting and the syslog shows this error. What keeps causing this? I'm not stopping it and nothing that I know of is. snort[28830]: *** Caught Term-Signal snort[28830]: Run time prior to being shutdown was 608465.830124 seconds kernel: device eth1 left promiscuous mode Thanks, Andy Berryman ############################################################################### This message from Cymtec Systems, Inc. contains confidential information and is solely for the use of the recipient(s) named above. If you are not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this message in error and that any review, disclosure, copying, distribution or use of the contents of this message is strictly prohibited. If you have received this message in error, please destroy it immediately and notify Cymtec Systems, Inc. by telephone at +1.314.993.8700 or by return e-mail. ############################################################################### ------------------------------------------------------------------------------ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort 2.8.6 Caught term signal? Andy Berryman (May 12)
- Re: Snort 2.8.6 Caught term signal? Edward Bjarte Fjellskål (May 12)
- Re: Snort 2.8.6 Caught term signal? Andy Berryman (May 13)
- Re: Snort 2.8.6 Caught term signal? Edward Bjarte Fjellskål (May 12)