SnortCenter

[wallace1819]

Hi,

Anyone using snortcenter? I installed an ids which is using snort/acid/mysql and snortcenter/snortagent. Everyting is working almost perfectly. The only problem I seem to be having is with snortcenter.

When I click on the sensor console it brings up my sensor like it should. When I click on "system status", everything looks good, but when I click "start" to start snort on the sensor, the page refreshes, but it still shows that "Snort is not Running". However, when I check the sensor it shows that snort was started correctly. If I go back and click restart, snortcenter still says that "Snort is not Running", and when I check the sensor again I now see two instances of snort running. This leads me to believe that for some reason snortcenter is not finding the .pid file in /var/run so it does not know that snort was started. I've poured over the php code for the sensor console (sensor.php) trying to find where exactly it is looking for the pid file, but have come up with nothing... (granted I don't know the first d@mn thing about php, but that has never stoped me before :>).

Has anyone seen this before?

thx,
wallace