Re: Snort3 - PID file not readable

[ZdenekChladek_cyber <cyber () dopis cz>]

I gave to the file full permissions
-rwxrwxrwx   1 root  wheel       0 Oct 25 15:01 snort_bridge0.pid
I launched snort as root

next things what I found:

seems to be, that snort3 has hard-defined path and name of the pid file

2) when I launch wiht swich -D(daemon):
#/usr/local/snort/bin/snort -D -i bridge0 -c 
/usr/local/snort/etc/snort/snort.lua
the pid file is not created / I can not find the file

3) when I launch wiht swich --create-pidfile:
#/usr/local/snort/bin/snort --create-pidfile -i bridge0 -c 
/usr/local/snort/etc/snort/snort.lua
returns:
Writing PID "4133" to file "./snort.pid"

and the file is created.

Why daemon doesn't create pidfile?
How can I define name of the pidfile and also path to the file?

Thank You
Regards ZAJDAN



I launched

Dne 25.10.2018 14:46, Giles Coochey via Snort-users napsal:
> On 25/10/2018 13:37, ZdenekChladek_cyber wrote:
>
> > actually the file doesn't exist
> > even when I created it manually, snort doesn't send there the ID
> If you create the file manually, what user, group and what permissions
> do you create the file with?
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists snort org
> Go to this URL to change user options or unsubscribe:
> https://lists.snort.org/mailman/listinfo/snort-users
>
>         To unsubscribe, send an email to:
>         snort-users-leave () lists snort org
>
> Please visit http://blog.snort.org to stay current on all the latest 
> Snort news!
>
> Please follow these rules:
> https://snort.org/faq/what-is-the-mailing-list-etiquette
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette