The sguil-sensor machine normally runs two "snort" processes: - one process is started with "/etc/init.d/snort" and creates the following pid file: "/var/run/snort_eth1.pid" - the other process is started with "/etc/init.d/log_packets" and creates the following pid file: "/var/run/sguil/logpackets.pid". BUT at the same time overwrites the "/var/run/snort_eth1.pid" file which was created previously by the other "snort" process. I restart these two processes frequently, log_packets every hour and snort every day, and after a couple of days I have numerous "snort" processes running, and I think it is the consequence of the above reported issue. These two "init" scripts, and associated config files (conf.d) should be revised. See also bug "123477" reported previously.
Fix pidfile in cvs
