Re: running more instances of snort

[Jeremy Hoel <jthoel () gmail com>]

Like James Lay said.. you need a second configuarion, pid and output files
configured to run it daemon mode.


On Mon, Mar 31, 2014 at 8:04 PM, Michal Šutta <michal.sutta () gmail com>wrote:

> I am not so sure about the memory. When I start the first instance of
> Snort in daemon mode and the second without daemon mode
> both are running without problems.   There is only a problem when I try to
> strat the second instance in daemon mode.
>
> Any suggestions ?
>
>
> 2014-03-31 21:44 GMT+02:00 Livio Ricciulli <livio () metaflows com>:
>
>  You are probably running out of memory..
> > On 03/31/2014 11:22 AM, Michal Šutta wrote:
> >
> > Hello,
> >
> > I have a problem running multiple instances of snort in daemon mode
> > on one pc. The first instance starts with no problems and i can see it
> > using the command
> > ps -aux | grep snort.
> >  But when i start the second one i get this output
> >
> >  Spawning daemon child...
> > My daemon child 25420 lives...
> > Daemon parent exiting (0)
> >
> >  and when i use the command ps -aux | grep snort there is only one
> > instance od Snort runnig.
> >
> >  Is there a way to run  more instances of Snort  in daemon mode on one
> > pc ?
> >
> >  Thank you for help
> >
> >
> > ------------------------------------------------------------------------------
> >
> >
> >
> > _______________________________________________
> > Snort-users mailing listSnort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest Snort news!
> >
> >
> >
> >
> > ------------------------------------------------------------------------------
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest
> > Snort news!
>
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!