[Snort-users] "snort dead but subsys locked"
Earl D. Fife
fife at ...6875...
Wed Sep 11 12:01:29 EDT 2002
(Sorry for the prior message with no subject. I'm using an awkward email
client for responding and I wasn't careful in checking all of the headers.)
In Redhat, the /etc/rc.d/init.d/snort creates the file
/var/lock/subsys/snort when snort starts then removes it when the script
stops snort. You snort process died, but the file remains in
As root, issue the command
rm -f /var/lock/subsys/snort
Then you can restart snort.
Quoting Luiz Alberto Cataldo Jr <cataldo_jr at ...6873...>:
> I am with a serious problem. I am having problems initializing the
> Snort. I am using the Red Hat 7,2, when I enter in/etc/rc.d/init.d
> and I execute the command /snortd start and I receive the message OK.
> After this I execute /snortd status and I receive the message "snort
> dead but subsys locked". I have already looked all the configuration
> and I did not find anything wrong. Somebody knows how i could resolve
> Luiz Cataldo
> Yahoo! PageBuilder - O super editor para criação de sites: é grátis,
> fácil e rápido.
More information about the Snort-users