Re: [LUG] snort.pid file?

[Luke Hinds <luke@xxxxxxxxxxxxxxxxxxxxxxx>]

On Sun, 2003-08-17 at 18:19, Neil Williams wrote:
> On Sunday 17 Aug 2003 5:02 pm, Luke Hinds wrote:
> > Hi All,
> >
> > Anyone know where snort sticks its pid. I tried /var/run but no sign of
> > it??
> http://www.snort.org/docs/
> restartsnort() {
>     # Restarting Snort for all interfaces
>     for i in $IFACES; do
>              "$ECHO" "Setting up Snort for interface "$i""
>              $ECHO "Restarting Snort..."
>              #/usr/bin/killall snort
>              if [ -f /var/run/snort_"$i".pid ]
> 
> So it should be in /var/run/ named snort_eth0.pid, snort_ppp0.pid  or similar.
> 
> The quickest way to find this on a working system is to see if the script 
> itself will tell you:
> (as root)
> # grep pid /etc/init.d/snort*
> 
> If it isn't in /var/run/, are you sure it is running?
> 
> ps ax | grep snort
> 
rm -f /var/run/snort_${INTERFACE}.pid

But it's not in /var/run 

Definitely running as a demon.

17053 pts/3    00:00:00 snort

I must be missing the down right obvious!??! Will have a look again
later.

Thanks,
Luke

Attachment: signature.asc
Description: This is a digitally signed message part