[Snort-users] problems in snort installing.

waldo kitty wkitty42 at ...14940...
Sun Mar 17 13:48:31 EDT 2013



first, please keep the support discussions on the list... i'm sending this to 
the list and have set the followup to the list... thanks! ;)


On 3/17/2013 04:33, Mohammad MontazerI wrote:
> Hello dear waldo
> no I didn't do it!
> is this a problem?

it may be... more than one instance trying to access the same files which may be 
locked...

> what is that? how can stop it?

in your previous message, you use ps piped to grep to find the snort instance 
(3987)... the second column is the pid number of the task in question...

kill -SIGTERM %pid%

where "%pid%" is the actual number without the percent signs... then ps again to 
see if it is gone... you should always see at least one line with your grep term 
because you are seeing what you just asked for being being executed ;)

so...

ps aux | grep snort
get second column number of the snort entry without grep on the line
kill -SIGTERM %number%
ps aux | grep snort
is that snort gone from the list?

if yes, then it is terminated... logging out and back in might kill it too... a 
reboot always will ;)

> Thank you so much.
>
> *From:* waldo kitty <wkitty42 at ...14940...>
> *To:* snort-users at lists.sourceforge.net
> *Sent:* Saturday, March 16, 2013 11:32 PM
> *Subject:* Re: [Snort-users] problems in snort installing.
>
> On 3/16/2013 10:49, Mohammad MontazerI wrote:
>  > linux-s211:/usr/sbin # ./snort -i eth0 -D -u snort -g snort -c
> /etc/snort/snort.conf
>  > Spawning daemon child...
>  > My daemon child 3987 lives...
>  > Daemon parent exiting (0)
>  >
>  >
>  > inux-s211:/usr/sbin # ps aux | grep -i "snort"
>  > snort 3987 0.1 5.4 316068 54936 ? Ssl 11:59 0:00 ./snort -i eth0 -D -u snort -g
>  > snort -c /etc/s
>  > root 3990 0.0 0.0 4172 804 pts/1 S+ 11:59 0:00 grep --color=auto -i snort
>  >
>  >
>  > everythings seems ok until here but!!:
>
> right snort is running in daemon mode at this time...
>
>  > linux-s211:/usr/sbin # /etc/init.d/snort start
>  > bash: /etc/init.d/snort: Permission denied (i already switched to root and
>  > copied snort script to the /etc/init.d directory )
>
> did you stop the previous instance of snort before trying to start another one?? ;)





More information about the Snort-users mailing list