Snort mailing list archives
Bugreport - 60 second timeout before shutdown
From: elof () sentor se
Date: Mon, 3 May 2010 14:03:28 +0200 (CEST)
I run snort v2.8.5.2 as a daemon (chrooted, with different uid/gid and with several output plugins activated, including database). When I run 'kill <pid>', I immediately get syslog messages indicating that snort is going down (closing db connection, dumping stats, etc). However, the process don't die until 60 seconds later. See the timestamps of the last two syslog rows: May 3 13:48:05 snortbox snort[97227]: UDP Port Filter May 3 13:48:05 snortbox snort[97227]: Dropped: 0 May 3 13:48:05 snortbox snort[97227]: Inspected: 0 May 3 13:48:05 snortbox snort[97227]: Tracked: 0 May 3 13:48:05 snortbox snort[97227]: ============================== May 3 13:48:05 snortbox snort[97227]: ============================== May 3 13:48:05 snortbox snort[97227]: dcerpc2 Preprocessor Statistics May 3 13:48:05 snortbox snort[97227]: ============================== May 3 13:48:05 snortbox snort[97227]: ============================== May 3 13:48:05 snortbox snort[97227]: Could not remove pid file /var/run//snort_eth0.pid: No such file or directory May 3 13:49:04 snortbox snort[97227]: Snort exiting ------------------------------------------------------------------------------ _______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel
Current thread:
- Bugreport - 60 second timeout before shutdown elof (May 03)
- Message not available
- Re: Bugreport - 60 second timeout before shutdown elof (May 06)
- Re: Bugreport - 60 second timeout before shutdown Jason Wallace (May 06)
- Re: Bugreport - 60 second timeout before shutdown Steven Sturges (May 06)
- Re: Bugreport - 60 second timeout before shutdown elof (May 06)
- Message not available