[Snort-devel] Bugreport - 60 second timeout before shutdown

elof at ...969... elof at ...969...
Mon May 3 08:03:28 EDT 2010


I run snort v2.8.5.2 as a daemon (chrooted, with different uid/gid and 
with several output plugins activated, including database).

When I run 'kill <pid>', I immediately get syslog messages indicating that 
snort is going down (closing db connection, dumping stats, etc).

However, the process don't die until 60 seconds later. See the 
timestamps of the last two syslog rows:


May  3 13:48:05 snortbox snort[97227]:            UDP Port Filter
May  3 13:48:05 snortbox snort[97227]:                    Dropped: 0
May  3 13:48:05 snortbox snort[97227]:                  Inspected: 0
May  3 13:48:05 snortbox snort[97227]:                    Tracked: 0
May  3 13:48:05 snortbox snort[97227]: ==============================
May  3 13:48:05 snortbox snort[97227]: ==============================
May  3 13:48:05 snortbox snort[97227]: dcerpc2 Preprocessor Statistics
May  3 13:48:05 snortbox snort[97227]: ==============================
May  3 13:48:05 snortbox snort[97227]: ==============================
May  3 13:48:05 snortbox snort[97227]: Could not remove pid file 
/var/run//snort_eth0.pid: No such file or directory
May  3 13:49:04 snortbox snort[97227]: Snort exiting





More information about the Snort-devel mailing list