Snort mailing list archives

RE: PID problem


From: "Schmehl, Paul L" <pauls () utdallas edu>
Date: Fri, 22 Aug 2003 11:24:49 -0500

-----Original Message-----
From: Edin Dizdarevic [mailto:edin.dizdarevic () interActive-Systems de] 
Sent: Friday, August 22, 2003 11:04 AM
To: Schmehl, Paul L
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] PID problem

I love open source ;)

There is also the "-R" switch:

snort -c /etc/snort/snort.conf_eth0 -i eth0 -D -R _special

will make the

/var/run/snort_eth0_special.pid

file

Interesting.  Running snort_special like this:
/usr/local/bin/snort_special -R special -T works fine, but when I use
the args in a startup script, it fails.  The args are -i xl0 -o -u root
-g snort -R special -l /var/log/snort/special -D.

When I tail /var/log/messages I can see that it's still create the
pidfile as snort_xl0.pid even though I'm changing it on the commandline
in the ARGS variable.

I guess I'll have to edit the source and create a new instance to do
what I want.....

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 


-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: