Snort mailing list archives
Snort 2.0.6 fails to close portscan.log on SIGHUP
From: Bill McCarty <bmccarty () pt-net net>
Date: Tue, 27 Jan 2004 00:40:08 -0800
Hi all,Lsof shows that Snort 2.0.6 under Gentoo appears not to close portscan.log upon receiving SIGHUP:
snort 31098 root 6u REG 3,2 0 65607 /var/log/snort/portscan.log.2 (deleted)
snort 31098 root 8u REG 3,2 0 65614 /var/log/snort/portscan.log.1
snort 31098 root 10u REG 3,2 0 65620 /var/log/snort/portscan.log
snort 31098 root 11w REG 3,2 920 65621 /var/log/snort/alert_full
snort 31098 root 12w REG 3,2 577 65626 /var/log/snort/alert_fast
Can anyone else confirm this on Gentoo or another platform? Cheers, --------------------------------------------------- Bill McCarty ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort 2.0.6 fails to close portscan.log on SIGHUP Bill McCarty (Jan 27)