Re: [LUG] snort.pid file?

[Neil Williams <linux@xxxxxxxxxxxxxx>]

On Sunday 17 Aug 2003 5:02 pm, Luke Hinds wrote:
> Hi All,
>
> Anyone know where snort sticks its pid. I tried /var/run but no sign of
> it??
http://www.snort.org/docs/
restartsnort() {
    # Restarting Snort for all interfaces
    for i in $IFACES; do
             "$ECHO" "Setting up Snort for interface "$i""
             $ECHO "Restarting Snort..."
             #/usr/bin/killall snort
             if [ -f /var/run/snort_"$i".pid ]

So it should be in /var/run/ named snort_eth0.pid, snort_ppp0.pid  or similar.

The quickest way to find this on a working system is to see if the script 
itself will tell you:
(as root)
# grep pid /etc/init.d/snort*

If it isn't in /var/run/, are you sure it is running?

ps ax | grep snort


-- 

Neil Williams
=============
http://www.codehelp.co.uk
http://www.dclug.org.uk

http://www.biglumber.com/x/web?qs=0x8801094A28BCB3E3

Attachment: pgp00029.pgp
Description: signature