Snort mailing list archives

Re: PID file


From: Nick Kraal <nick () arc net my>
Date: Thu, 31 Oct 2002 00:33:19 +0800

Andrew,

Look excellent!! Thanks for the pointer.

-nick/

----- Original Message -----
From: "Andrew R. Baker" <andrewb () snort org>
To: "Nick Kraal" <nick () arc net my>
Cc: "Alberto Gonzalez" <ag-snort () cerebro violating us>;
<snort-users () lists sourceforge net>
Sent: Thursday, October 31, 2002 12:11 AM
Subject: Re: [Snort-users] PID file


Nick Kraal wrote:
Thanks for your reply.

I am using the following command to run the process as daemon:
/usr/local/bin/snort -di eth1 -h 192.168.100.0/24 -l /var/log/snort -c
/etc/snort/snort.conf -s -D

But it looks like Snort runs but does not seem to be running as daemon
in
the background. I can see the process run from the "ps -ef" output and
get
the following output and just sits there and no pid file is created.

IIRC, Snort 1.9.0 for UNIX has a known bug regarding the "-s" option.
Basically, you need to add a fake argument after it.  In the above
commandline, the "-D" option that would be used to indicate daemon mode
is getting taken as the argument to "-s".  Either upgrade to latest
Snort from the 1.9 branch in CVS or change you command to:

/usr/local/bin/snort -di eth1 -h 192.168.100.0/24 -l /var/log/snort -c
/etc/snort/snort.conf -s foo -D


-A



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: