Snort mailing list archives

Bugreport - 60 second timeout before shutdown


From: elof () sentor se
Date: Mon, 3 May 2010 14:03:28 +0200 (CEST)


I run snort v2.8.5.2 as a daemon (chrooted, with different uid/gid and 
with several output plugins activated, including database).

When I run 'kill <pid>', I immediately get syslog messages indicating that 
snort is going down (closing db connection, dumping stats, etc).

However, the process don't die until 60 seconds later. See the 
timestamps of the last two syslog rows:


May  3 13:48:05 snortbox snort[97227]:            UDP Port Filter
May  3 13:48:05 snortbox snort[97227]:                    Dropped: 0
May  3 13:48:05 snortbox snort[97227]:                  Inspected: 0
May  3 13:48:05 snortbox snort[97227]:                    Tracked: 0
May  3 13:48:05 snortbox snort[97227]: ==============================
May  3 13:48:05 snortbox snort[97227]: ==============================
May  3 13:48:05 snortbox snort[97227]: dcerpc2 Preprocessor Statistics
May  3 13:48:05 snortbox snort[97227]: ==============================
May  3 13:48:05 snortbox snort[97227]: ==============================
May  3 13:48:05 snortbox snort[97227]: Could not remove pid file 
/var/run//snort_eth0.pid: No such file or directory
May  3 13:49:04 snortbox snort[97227]: Snort exiting


------------------------------------------------------------------------------
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel


Current thread: