0001124: Snort is not killed by pfcmd - PacketFence

Bug Tracking System

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0001124

PacketFence

upstream

public

2010-11-25 12:10

2011-02-28 14:47

Reporter

fgaudreault

Assigned To

fgaudreault

Priority

normal

Severity

major

Reproducibility

have not tried

Status

resolved

Resolution

won't fix

Platform

OS Version

Product Version

1.9.1

Target Version

Fixed in Version

Summary

0001124: Snort is not killed by pfcmd

Description

Seen on CentOS 5.5 x86_64, SNORT is not able to be killed using the "pfcmd service snort stop" command while it's working with the same RPM package on CentOS 5.5 i386. Even after compiling the x86_64 RPM, the problem persists.

This implies some drawbacks, especially when you are in a HA cluster. PacketFence won't be able to stop properly, so the failover will never happen. It's a major problem. The issue is not related to PacketFence, but to snort.

A potential workaround is to modify the code to issue a "pkill -9 snort" instead of the standard "pkill snort".

Tags

No tags attached.

fixed in git revision

fixed in mtn revision

Attached Files

Relationships

Notes
(0001888) fgaudreault (viewer) 2011-02-28 14:47	Cannot reproduce on fresh CentOS 5.5 installation.

Issue History
Date Modified	Username	Field	Change
2010-11-25 12:10	fgaudreault	New Issue
2011-01-18 10:03	obilodeau	Target Version	=> 2.0.1
2011-01-26 15:30	obilodeau	Target Version	2.0.1 => 2.0.2
2011-02-28 14:47	fgaudreault	Note Added: 0001888
2011-02-28 14:47	fgaudreault	Status	new => resolved
2011-02-28 14:47	fgaudreault	Resolution	open => won't fix
2011-02-28 14:47	fgaudreault	Assigned To	=> fgaudreault