<![CDATA[Snort still running even after uninstalled (in GUI)]]>Hi all,

I see Snort starting and shutting down when I bring PFSense on or offline.  I had installed Snort to test, but by system only has 400mb RAM, and I saw that the requirements were higher so I uninstalled it using the package remove tool from within the WebGUI.

Snort has now survived several reboots - I wanted to let you know in case its not normal. Also, how I can remove this from my system without messing things up?

Thanks!

– Phob

]]>https://forum.netgate.com/topic/2810/snort-still-running-even-after-uninstalled-in-guiRSS for NodeSat, 06 Jun 2026 14:33:23 GMTSun, 10 Dec 2006 05:16:33 GMT60<![CDATA[Reply to Snort still running even after uninstalled (in GUI) on Mon, 11 Dec 2006 19:41:45 GMT]]>I would just ssh in and go to /usr/local/etc/rc.d  look for the snort startup script and delete it.  I don't imagine it works a whole lot different than other packages…

]]>https://forum.netgate.com/post/145593https://forum.netgate.com/post/145593Mon, 11 Dec 2006 19:41:45 GMT<![CDATA[Reply to Snort still running even after uninstalled (in GUI) on Mon, 11 Dec 2006 01:01:29 GMT]]>Thanks for the tips… only one problem, it doesn't appear in the panel anymore.

Should I attempt to re-install it then follow your instructions?

Worth a shot either way.

Thanks again,

-- Phob

]]>https://forum.netgate.com/post/145550https://forum.netgate.com/post/145550Mon, 11 Dec 2006 01:01:29 GMT<![CDATA[Reply to Snort still running even after uninstalled (in GUI) on Sun, 10 Dec 2006 18:25:21 GMT]]>Hey,

Your best bet is make sure it is not running before uninstalling it. In the shell run: kill -9 758 until it says:  kill: (xxx) - No such process or just do: killall -9 snort  (Two times should be enough) Then try to unistall it via the panel and reboot. See if that does the trick.

]]>https://forum.netgate.com/post/145540https://forum.netgate.com/post/145540Sun, 10 Dec 2006 18:25:21 GMT<![CDATA[Reply to Snort still running even after uninstalled (in GUI) on Sun, 10 Dec 2006 14:47:17 GMT]]>Hi,

PID: 758, Username: Root, THR: 1, PRI: -58, Nice: 0, Size: 12008K, RES: 11264K, State: bpf, Time: 0:06, WCPU 0.00%, Command: Snort

It doesn't look like its using up any processor cycles, but it is using a fair chunk of memory.  As I said above, I see it starting during boot-up, and get the report on shut-down.

Is there a way to manually un-install it?

Thanks!

– Phob

]]>https://forum.netgate.com/post/145527https://forum.netgate.com/post/145527Sun, 10 Dec 2006 14:47:17 GMT<![CDATA[Reply to Snort still running even after uninstalled (in GUI) on Sun, 10 Dec 2006 06:31:34 GMT]]>If you ssh into your pfsense box, enter the shell, and run the command 'top', what snort process do you see running?

]]>https://forum.netgate.com/post/145520https://forum.netgate.com/post/145520Sun, 10 Dec 2006 06:31:34 GMT