Snort mailing list archives
Re: Multiple Snort Instances With Identical Interfaces In Daemon
From: Joel Esler <jesler () sourcefire com>
Date: Thu, 5 May 2011 18:06:47 -0400
Okay, so a config pid-path: is the request I am hearing? Joel On Thu, May 5, 2011 at 6:03 PM, Martin Holste <mcholste () gmail com> wrote:
+1 I hate having to use --pid-path as it forces me to wrap everything in shell scripts. Being able to specify an exact PID file would be stellar. On Thu, May 5, 2011 at 4:32 PM, Eoin Miller <eoin.miller () trojanedbinaries com> wrote:Noticing some weirdness with Snort 2.9.0.5 when you run multiple instances of it reading from the same interface in daemon mode. It appears that a collision of the PID files causes all other instances to exit without notifying the user when you are starting it. If you do not fork the processes, they will all run without issue. Users can get around the daemonized processes disappearing by using the --pid-path option and passing it to the binary on startup. Anyone know if there is a way to specify --pid-path within the conf file? I much prefer passing everything that way if possible. -- Eoin------------------------------------------------------------------------------WhatsUp Gold - Download Free Network Management Software The most intuitive, comprehensive, and cost-effective network management toolset available today. Delivers lowest initial acquisition cost and overall TCO of any competing solution. http://p.sf.net/sfu/whatsupgold-sd _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users------------------------------------------------------------------------------ WhatsUp Gold - Download Free Network Management Software The most intuitive, comprehensive, and cost-effective network management toolset available today. Delivers lowest initial acquisition cost and overall TCO of any competing solution. http://p.sf.net/sfu/whatsupgold-sd _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------ WhatsUp Gold - Download Free Network Management Software The most intuitive, comprehensive, and cost-effective network management toolset available today. Delivers lowest initial acquisition cost and overall TCO of any competing solution. http://p.sf.net/sfu/whatsupgold-sd
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Multiple Snort Instances With Identical Interfaces In Daemon Eoin Miller (May 05)
- Re: Multiple Snort Instances With Identical Interfaces In Daemon Martin Holste (May 05)
- Re: Multiple Snort Instances With Identical Interfaces In Daemon Joel Esler (May 05)
- Re: Multiple Snort Instances With Identical Interfaces In Daemon Eoin Miller (May 05)
- Re: Multiple Snort Instances With Identical Interfaces In Daemon Joel Esler (May 05)
- Re: Multiple Snort Instances With Identical Interfaces In Daemon Martin Holste (May 05)
- Re: Multiple Snort Instances With Identical Interfaces In Daemon Eoin Miller (May 07)
- Re: Multiple Snort Instances With Identical Interfaces In Daemon waldo kitty (May 06)
- Re: Multiple Snort Instances With Identical Interfaces In Daemon Joel Esler (May 07)
- Re: Multiple Snort Instances With Identical Interfaces In Daemon waldo kitty (May 07)
- Re: Multiple Snort Instances With Identical Interfaces In Daemon Joel Esler (May 05)
- Re: Multiple Snort Instances With Identical Interfaces In Daemon Martin Holste (May 05)