[Snort-users] Snort does not deamonize

Paul Schmehl pschmehl_lists at ...14358...
Thu Jan 28 00:09:08 EST 2010

--On January 27, 2010 9:30:36 AM -0600 Helmut Schneider <jumper99 at ...348...> 

> Hi,
> since I have a problem with snort, after startup on FreeBSD 8.0
> it
> does not deamonize. The startup command is
> /usr/local/bin/snort -Dyq -F /usr/local/etc/snort/filter.conf -u nobody
> -g
> nobody -t /var/snort -l /var/snort/var/log -i xl0 -c
> /usr/local/etc/snort/snort.conf

Your problem is here - -Dyq.  You cannot combine the -D (daemonize) switch 
with other switches.  Change it to -D -yq.  (You may also have to separate 
the -y and -q switches.  I don't know because I haven't tested that.)

I ran into this problem on FreeBSD 7.2.  Took me a while to figure it out.

Paul Schmehl, If it isn't already
obvious, my opinions are my own
and not those of my employer.
WARNING: Check the headers before replying

More information about the Snort-users mailing list