[Snort-users] "snort dead but subsys locked"

Earl D. Fife fife at ...6875...
Wed Sep 11 12:01:29 EDT 2002

(Sorry for the prior message with no subject. I'm using an awkward email
client for responding and I wasn't careful in checking all of the headers.)

In Redhat, the /etc/rc.d/init.d/snort creates the file
/var/lock/subsys/snort when snort starts then removes it when the script
stops snort.  You snort process died, but the file remains in

As root, issue the command
rm -f /var/lock/subsys/snort

Then you can restart snort.


Quoting Luiz Alberto Cataldo Jr <cataldo_jr at ...6873...>:

> All, 
> I am with a serious problem.  I am having problems initializing the
> Snort.  I am using the Red Hat 7,2, when I enter in/etc/rc.d/init.d
> and I execute the command /snortd start and I receive the message OK.
> After this I execute /snortd status and I receive the message "snort
> dead but subsys locked". I have already looked all the configuration
> and I did not find anything wrong. Somebody knows how i could resolve
> is.
> Luiz Cataldo
> ---------------------------------
> Yahoo! PageBuilder - O super editor para criação de sites: é grátis,
> fácil e rápido.

More information about the Snort-users mailing list