Re: problems in snort installing.

[waldo kitty <wkitty42 () windstream net>]

first, please keep the support discussions on the list... i'm sending this to 
the list and have set the followup to the list... thanks! ;)


On 3/17/2013 04:33, Mohammad MontazerI wrote:
> Hello dear waldo
> no I didn't do it!
> is this a problem?

it may be... more than one instance trying to access the same files which may be 
locked...

> what is that? how can stop it?

in your previous message, you use ps piped to grep to find the snort instance 
(3987)... the second column is the pid number of the task in question...

kill -SIGTERM %pid%

where "%pid%" is the actual number without the percent signs... then ps again to 
see if it is gone... you should always see at least one line with your grep term 
because you are seeing what you just asked for being being executed ;)

so...

ps aux | grep snort
get second column number of the snort entry without grep on the line
kill -SIGTERM %number%
ps aux | grep snort
is that snort gone from the list?

if yes, then it is terminated... logging out and back in might kill it too... a 
reboot always will ;)

> Thank you so much.
>
> *From:* waldo kitty <wkitty42 () windstream net>
> *To:* snort-users () lists sourceforge net
> *Sent:* Saturday, March 16, 2013 11:32 PM
> *Subject:* Re: [Snort-users] problems in snort installing.
>
> On 3/16/2013 10:49, Mohammad MontazerI wrote:
>  > linux-s211:/usr/sbin # ./snort -i eth0 -D -u snort -g snort -c
> /etc/snort/snort.conf
>  > Spawning daemon child...
>  > My daemon child 3987 lives...
>  > Daemon parent exiting (0)
>  >
>  >
>  > inux-s211:/usr/sbin # ps aux | grep -i "snort"
>  > snort 3987 0.1 5.4 316068 54936 ? Ssl 11:59 0:00 ./snort -i eth0 -D -u snort -g
>  > snort -c /etc/s
>  > root 3990 0.0 0.0 4172 804 pts/1 S+ 11:59 0:00 grep --color=auto -i snort
>  >
>  >
>  > everythings seems ok until here but!!:
>
> right snort is running in daemon mode at this time...
>
>  > linux-s211:/usr/sbin # /etc/init.d/snort start
>  > bash: /etc/init.d/snort: Permission denied (i already switched to root and
>  > copied snort script to the /etc/init.d directory )
>
> did you stop the previous instance of snort before trying to start another one?? ;)


------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_mar
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!