[Snort-users] PID file

Nick Kraal nick at ...7357...
Wed Oct 30 08:37:06 EST 2002


Andrew,

Look excellent!! Thanks for the pointer.

-nick/

----- Original Message -----
From: "Andrew R. Baker" <andrewb at ...950...>
To: "Nick Kraal" <nick at ...7357...>
Cc: "Alberto Gonzalez" <ag-snort at ...7149...>;
<snort-users at lists.sourceforge.net>
Sent: Thursday, October 31, 2002 12:11 AM
Subject: Re: [Snort-users] PID file


> Nick Kraal wrote:
> > Thanks for your reply.
> >
> > I am using the following command to run the process as daemon:
> > /usr/local/bin/snort -di eth1 -h 192.168.100.0/24 -l /var/log/snort -c
> > /etc/snort/snort.conf -s -D
> >
> > But it looks like Snort runs but does not seem to be running as daemon
in
> > the background. I can see the process run from the "ps -ef" output and
get
> > the following output and just sits there and no pid file is created.
>
> IIRC, Snort 1.9.0 for UNIX has a known bug regarding the "-s" option.
> Basically, you need to add a fake argument after it.  In the above
> commandline, the "-D" option that would be used to indicate daemon mode
> is getting taken as the argument to "-s".  Either upgrade to latest
> Snort from the 1.9 branch in CVS or change you command to:
>
> /usr/local/bin/snort -di eth1 -h 192.168.100.0/24 -l /var/log/snort -c
> /etc/snort/snort.conf -s foo -D
>
>
> -A
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users





More information about the Snort-users mailing list