Multiple Snort Instances With Identical Interfaces In Daemon

[Eoin Miller <eoin.miller () trojanedbinaries com>]

Noticing some weirdness with Snort 2.9.0.5 when you run multiple 
instances of it reading from the same interface in daemon mode. It 
appears that a collision of the PID files causes all other instances to 
exit without notifying the user when you are starting it. If you do not 
fork the processes, they will all run without issue. Users can get 
around the daemonized processes disappearing by using the --pid-path 
option and passing it to the binary on startup.

Anyone know if there is a way to specify --pid-path within the conf 
file? I much prefer passing everything that way if possible.

-- Eoin



------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network 
management toolset available today.  Delivers lowest initial 
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users