tags 944665 wontfix confirmed severity 944665 wishlist thanks Dear Eeero,
Thank you for your bug report and apologies for the delay in answering. On Wed, 13 Nov 2019 at 15:42, Eero Volotinen <eero.t.voloti...@gmail.com> wrote: > install snort; start it (systemctl start snort). kill snort daemon with > killall -u snort ; try to start killed processed > with systemctl start; it' won't start. (check with ps -u snort; ) > Please note that snort is handled via the /etc/init.d/snort file. Unfortunately there is currently no service file in Debian as the way Snort is implemented in Debian (allowing to start multiple instances per interfaces) cannot be handled by systemd. Moreover, the default setup for Services in Debian (as seen in https://wiki.debian.org/systemd/Services) is to actually *not* restart the services if they fail. If you follow this sequence, snort will actually start snort: install snort, configure it and start it killall -u snort -- manually kill snort /etc/init.d/snort start -- snort will be started as normal Or, as you said: install snort, configure it and start it killall -u snort -- manually kill snort systemctl restart snort -- Snort will be restarted Please note that you are free to disable the init.d file and use a systemd service file for Snort yourself, and configure it to restart the service upon failure. I'm flagging this bug initially as wontfix and adjusting the severity, as this behaviour will not be fixed in the package. If there are no further users requesting this, I will close this bug after some time. Best regards Javier
