[Snort-devel] Re: SIGHUP doesn't work

Steve G linux_4ever at ...398...
Sun Sep 21 19:15:05 EDT 2003

>Are you dripping privs at runtime?

Yes. It is running under the snort user. So why does the error
get reported as a failure of the pcap stuff? If the problem is
that root is required for pcap, then it should at least say that
in the error message. I am even wondering if it should continue
the restart when failure is certain. This should also be in the
man page. 

BTW, can you not do a setreuid() back to root since the saved uid
is root?

-Steve Grubb

Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software

More information about the Snort-devel mailing list