Snort mailing list archives
Re: snort in centos not HUPing
From: Agus <agus.262 () gmail com>
Date: Wed, 13 Apr 2011 12:59:37 -0300
Exactly what i read but couldn't find a way to fix it without giving perms to snort to the dir.. i will try your suggestion. thanks for the tip.. 2011/4/13 Jason Wallace <jason.r.wallace () gmail com>:
In Gentoo we place the PID file in /var/run/snort/<file.pid> and then set /var/run/snort/ to be owned by the user used to run snort. If you drop root privileges when you start snort then the snort user does not have permissions to delete the pid file from /var/run (typically owned by root). That would be my guess as to what your problem is. Thx, Wally On Wed, Apr 13, 2011 at 10:25 AM, Agus <agus.262 () gmail com> wrote:Hey guys, snort-2903 --enable-reload, centos5, using the rpm/snortd Whenever i stop snort i get the error snort[28654]: Could not remove pid file /var/run//snort_eth0.pid: Permission denied No biggie as it then starts ok; buttt, when i HUP snort it dies with that same error; so i cant HUP it. I googled and found solutions but for other distros that dont work with Centos. I tried chown snort:snort to the pid and pid.lck files but same error persists. Any help would be appreciated. Cheers, ------------------------------------------------------------------------------ Forrester Wave Report - Recovery time is now measured in hours and minutes not days. Key insights are discussed in the 2010 Forrester Wave Report as part of an in-depth evaluation of disaster recovery service providers. Forrester found the best-in-class provider in terms of services and vision. Read this report now! http://p.sf.net/sfu/ibm-webcastpromo _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------ Forrester Wave Report - Recovery time is now measured in hours and minutes not days. Key insights are discussed in the 2010 Forrester Wave Report as part of an in-depth evaluation of disaster recovery service providers. Forrester found the best-in-class provider in terms of services and vision. Read this report now! http://p.sf.net/sfu/ibm-webcastpromo _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort in centos not HUPing Agus (Apr 13)
- Re: snort in centos not HUPing Jason Wallace (Apr 13)
- Re: snort in centos not HUPing Agus (Apr 13)
- Re: snort in centos not HUPing Agus (Apr 13)
- Re: snort in centos not HUPing Agus (Apr 13)
- Re: snort in centos not HUPing Jason Wallace (Apr 13)