Bug 153525

Summary:	net-analyzer/sguil-sensor-0.61 - "/etc/init.d/log_packets" overwrites snort pid file
Product:	Gentoo Linux	Reporter:	Clemente Aguiar <clemente.aguiar>
Component:	Current packages	Assignee:	Benjamin Smee (strerror) (RETIRED) <strerror>
Status:	RESOLVED TEST-REQUEST
Severity:	major	CC:	netmon
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Clemente Aguiar 2006-10-31 01:22:31 UTC

The sguil-sensor machine normally runs two "snort" processes:
- one process is started with "/etc/init.d/snort" and creates the following pid file: "/var/run/snort_eth1.pid"
- the other process is started with "/etc/init.d/log_packets" and creates the following pid file: "/var/run/sguil/logpackets.pid". BUT at the same time overwrites the "/var/run/snort_eth1.pid" file which was created previously by the other "snort" process.

I restart these two processes frequently, log_packets every hour and snort every day, and after a couple of days I have numerous "snort" processes running, and I think it is the consequence of the above reported issue.

These two "init" scripts, and associated config files (conf.d) should be revised. See also bug "123477" reported previously.

Comment 1 Cédric Krier gentoo-dev

2006-12-02 15:27:23 UTC

Fix pidfile in cvs