[Snort-users] Wrong pid Saved on OpenBSD?

Kevin.Brown at ...1022... Kevin.Brown at ...1022...
Fri Jan 5 22:39:43 EST 2001

On the linux box at work it is always one less than the actual PID the it is
running as.  I hacked together a script (based off of one supplied to me) so
that I could shut snort down at midnight, copy the logs and restart it, all as
a cron job.  I don't know why that is, but it works.

> I have noticed that when I run Snort 1.6.3p2 in daemon mode on my
> OpenBSD 2.8 box, it seems to be getting the PID wrong. That is, the
> file that it writes, snort_xl0.pid, in my case, contains the wrong
> PID. The PID in the file does not correspond to any existing
> process.
> Without taking the half-hour required to figure this out from the
> code, I thought that I would ask if this was a known issue or if
> something was amiss with my setup.
> Just to show exactly what I am doing,
>   # snort -Dqd -h aaa.bbb.ccc.ddd/ee -l log/net_aaa -c net_aaa.snort net aaa.bbb.ccc.ddd/ee
> The resulting PID in the ps(1) output does not match the contents of
> snort_xl0.pid. Due to OpenBSD's "randomization" of PIDs, there is no
> obvious correlation between the two values other than the fact they
> are never the same.
> -- 
> Crist J. Clark                           cjclark at ...485...
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/mailman/listinfo/snort-users

More information about the Snort-users mailing list