[Snort-devel] Snort 2.4.3 perfmonitor not finishing log entries properly

Alex Butcher alex.butcher at ...2437...
Thu Mar 9 03:31:02 EST 2006

Steven Sturges wrote:
> This relates to the issue that the signal handlers were
> causing snort to exit immediately.  Assuming the
> signal isn't a SEGV in writing the data, that is
> easily addressed (will be in the next release of snort).
> If you kill -9 the snort process, all bets are off.  :)


I'm using the standard RH killproc() function in /etc/init.d/functions,
without specifying a signal. Reading killproc(), this should send
SIGTERM, sleep for 100s, then send SIGKILL if it's not already dead.

> Cheers
> -steve

Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9

More information about the Snort-devel mailing list