View Full Version : subsys locked

23rd May 2007, 07:20 PM
When I logged after I installed snort, I noticed at the start up screen it said, "'Running snort.......[FAILED]"' so when I logged on I went to my service configuration and scrolled down to snortd, it said "' Snort Dead but subsys locked"' so my question is, how to I get it to run or how do I unlock it?

23rd May 2007, 07:25 PM
delete /var/lock/subsys/snortd

you can run it by typing service snortd start

23rd May 2007, 07:59 PM
Ok I did what said, but when I typed '' service snortd start'' it said ''Starting Snort......................FAILED'' then when I did ls, snort was there again. Any ideas?

23rd May 2007, 08:39 PM

service snortd restart

if it complains about a lock, delete the lock file and try restart again

if it still fails, try 'killall snortd', then restart it.

23rd May 2007, 08:47 PM
Ok I tried that, it said failed again, and the lock file re-appeared in /var/lock/subsys.

23rd May 2007, 09:50 PM
did you try killing the process, either with killall snortd, or do a 'ps -ef | grep snort', the pid will be in the second column, so so a 'kill -9 <pid>'

Has the sevice ever started successfully?