[Snort-users] running more instances of snort

Michal Šutta michal.sutta at ...11827...
Mon Mar 31 17:28:16 EDT 2014


so i need to run the command with  --nolock-pidfile ?


2014-03-31 22:52 GMT+02:00 Jeremy Hoel <jthoel at ...11827...>:

> Like James Lay said.. you need a second configuarion, pid and output files
> configured to run it daemon mode.
>
>
> On Mon, Mar 31, 2014 at 8:04 PM, Michal Šutta <michal.sutta at ...11827...>wrote:
>
>> I am not so sure about the memory. When I start the first instance of
>> Snort in daemon mode and the second without daemon mode
>> both are running without problems.   There is only a problem when I try
>> to strat the second instance in daemon mode.
>>
>> Any suggestions ?
>>
>>
>> 2014-03-31 21:44 GMT+02:00 Livio Ricciulli <livio at ...15149...>:
>>
>>  You are probably running out of memory..
>>>
>>> On 03/31/2014 11:22 AM, Michal Šutta wrote:
>>>
>>> Hello,
>>>
>>> I have a problem running multiple instances of snort in daemon mode
>>> on one pc. The first instance starts with no problems and i can see it
>>> using the command
>>> ps -aux | grep snort.
>>>  But when i start the second one i get this output
>>>
>>>  Spawning daemon child...
>>> My daemon child 25420 lives...
>>> Daemon parent exiting (0)
>>>
>>>  and when i use the command ps -aux | grep snort there is only one
>>> instance od Snort runnig.
>>>
>>>  Is there a way to run  more instances of Snort  in daemon mode on one
>>> pc ?
>>>
>>>  Thank you for help
>>>
>>>
>>> ------------------------------------------------------------------------------
>>>
>>>
>>>
>>> _______________________________________________
>>> Snort-users mailing listSnort-users at lists.sourceforge.net
>>> Go to this URL to change user options or unsubscribe:https://lists.sourceforge.net/lists/listinfo/snort-users
>>> Snort-users list archive:http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>>>
>>> Please visit http://blog.snort.org to stay current on all the latest Snort news!
>>>
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>>
>>> _______________________________________________
>>> Snort-users mailing list
>>> Snort-users at lists.sourceforge.net
>>> Go to this URL to change user options or unsubscribe:
>>> https://lists.sourceforge.net/lists/listinfo/snort-users
>>> Snort-users list archive:
>>> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>>>
>>> Please visit http://blog.snort.org to stay current on all the latest
>>> Snort news!
>>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>>
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>>
>> Please visit http://blog.snort.org to stay current on all the latest
>> Snort news!
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140331/08f99248/attachment.html>


More information about the Snort-users mailing list