[Snort-users] Prevent Snort from starting a new instance if one already there

Scott Nursten scottn at ...4526...
Wed Sep 18 04:19:02 EDT 2002


Snort writes a pid file to /var/run/snort_xxxx.pid where xxxx is the
interface name, so...

if [ ! -f "/var/run/snort_${if}.pid" ]; then
    snort -I ${if} /etc/snort/snort.${if}.conf
fi

Kind Regards, 

-- 
Scott Nursten
--------------------------
S2S Consultants
T: 01444 232 742
F: 01444 232 061
W: http://s2s.ltd.uk
E: scottn at ...4526...
--------------------------





More information about the Snort-users mailing list