From: Phillips, M. <Mic...@bm...> - 2004-03-04 12:48:19
|
When running snort_inline in inline mode, (using -Q), I get an this error when trying to "kill -HUP snort_inline-PID-Number ". This is the error .... =20 -*> Snort! <*- Version 2.1.0 (Build 9) By Martin Roesch (ro...@so..., www.snort.org) pcap_stats: pcap_stats: Bad file descriptor database: Closing connection to database "" Restarting Snort Reading from iptables Running in IDS mode Log directory =3D /var/log/snort Initializing Inline mode InlineInit: : Unable to bind netlink socket: Address already in use =20 I am using these command line arguments/switches " -c /xx -l /xx -d -Q "=20=20 =20 Has anybody else come across this and is there a way to HUP the process when using -Q =20 Thanks Michael =20 =20 BMRB International=20 http://www.bmrb.co.uk +44 (0)20 8566 5000 _________________________________________________________________ This message (and any attachment) is intended only for the=20 recipient and may contain confidential and/or privileged=20 material. If you have received this in error, please contact the=20 sender and delete this message immediately. Disclosure, copying=20 or other action taken in respect of this email or in=20 reliance on it is prohibited. BMRB International Limited=20 accepts no liability in relation to any personal emails, or=20 content of any email which does not directly relate to our=20 business. |