[Snort-users] Snort v1.6 in daemon mode dies on HUP

Martin Roesch roesch at ...421...
Thu Sep 14 20:52:23 EDT 2000


Because SIGHUP handling wasn't very good in v1.6? :)  I'd recommend upgrading
to version 1.6.3, which is available at http://www.snort.org.  Give that a
shot and let us know how it goes!

     -Marty

Simon Attwell wrote:
> 
> Hi all,
> 
> Running snort v1.6 in daemon mode
> snort -D -e -i eth0 -l /usr/local/snort/logs -c /usr/local/snort/rules/ids.rules.082900 -s -v -b
> 
> If I kill -HUP <pid> the snort process...
> 
> Sep 14 19:10:24 belgarion snort[96]: Received SIGHUP. Restarting
> Sep 14 19:10:24 belgarion snort[96]: Restarting snort failed
> Sep 14 19:10:24 belgarion kernel: device eth0 left promiscuous mode
> 
> Any ideas why the restart should fail ?
> 
>         - Simon
> 
> --
> Simon Attwell
> Systems Engineer
> Berbee
> 5520 Research Park Drive
> Madison, WI 53711
> attwell at ...460...
> 
> Berbee... putting the E in business.
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users

-- 
Martin Roesch
roesch at ...421...
http://www.snort.org



More information about the Snort-users mailing list