Snort mailing list archives

Re: Multiple Snort Instances With Identical Interfaces In Daemon


From: Martin Holste <mcholste () gmail com>
Date: Thu, 5 May 2011 21:43:39 -0500

Awesome, thanks!

On Thu, May 5, 2011 at 5:24 PM, Joel Esler <jesler () sourcefire com> wrote:
Okay, I'll enter a bug for these.  Thanks.
Joel

On Thu, May 5, 2011 at 6:17 PM, Eoin Miller
<eoin.miller () trojanedbinaries com> wrote:

On 5/5/2011 10:06 PM, Joel Esler wrote:

Okay, so a config pid-path: is the request I am hearing?

Joel

config pid-path: would be nice, but also being able to specify the actual
file name its self would be nice so we don't have to make multiple subdir's
to track this stuff.

1. Snort should check for PID file collisions when daemonizing because if
it occurs, the child process just disappears into the ether with no
error/warning.
2. config pid-path: and config pid-file: would be great options to have
within snort.conf


Something else I am noticing, if you use the --pid-path option at the
command line and then you have snort exit gracefully, it just decides to
leaves the .pid file behind without deleting it? This behavior does not
occur unless you use --pid-path when you are daemonizing.

-- Eoin




------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network 
management toolset available today.  Delivers lowest initial 
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: