Nick Kraal wrote:
> Thanks for your reply.
>
> I am using the following command to run the process as daemon:
> /usr/local/bin/snort -di eth1 -h 192.168.100.0/24 -l /var/log/snort -c
> /etc/snort/snort.conf -s -D
>
> But it looks like Snort runs but does not seem to be running as daemon in
> the background. I can see the process run from the "ps -ef" output and get
> the following output and just sits there and no pid file is created.

IIRC, Snort 1.9.0 for UNIX has a known bug regarding the "-s" option.
Basically, you need to add a fake argument after it. In the above
commandline, the "-D" option that would be used to indicate daemon mode
is getting taken as the argument to "-s". Either upgrade to latest
Snort from the 1.9 branch in CVS or change you command to:

/usr/local/bin/snort -di eth1 -h 192.168.100.0/24 -l /var/log/snort -c
/etc/snort/snort.conf -s foo -D

-A

-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]