Eu tentei usar o comando systemctl status snortd.service -l para iniciar o serviço snort. Finalmente recebi esta mensagem de erro:
[root@localhost bin]# systemctl status snortd.service -l
● snortd.service - LSB: Start up the Snort Intrusion Detection System daemon
Loaded: loaded (/etc/rc.d/init.d/snortd; bad; vendor preset: disabled)>
Active: failed (Result: timeout) since Wed 2017-12-06 09:06:58 +07; 48min ago
Docs: man:systemd-sysv-generator(8) Process: 3650 ExecStart=/etc/rc.d/init.d/snortd start (code=exited, status=0/SUCCESS) CGroup: /system.slice/snortd.service
└─1426 /usr/sbin/snort -A fast -b -d -D -i eno16777736 -u snort -g snort -c /etc/snort/snort.conf -l /var/log/snort
Dec 06 09:02:00 localhost.localdomain snortd[3650]: [17B blob data]
Dec 06 09:02:00 localhost.localdomain systemd[1]: PID file > /var/run/dhclient_eno16777736.pid not readable (yet?) after start.
Dec 06 09:02:00 localhost.localdomain snort[3672]: Reload thread starting...
Dec 06 09:02:00 localhost.localdomain snort[3672]: Reload thread started, thread 0x7f4729bd5700 (3674)
Dec 06 09:02:00 localhost.localdomain snort[3672]: Decoding Ethernet
Dec 06 09:02:00 localhost.localdomain snort[3672]: Set gid to 1001
Dec 06 09:06:58 localhost.localdomain systemd[1]: snortd.service start operation timed out. Terminating.
Dec 06 09:06:58 localhost.localdomain systemd[1]: Failed to start LSB: Start up the Snort Intrusion Detection System daemon.
Dec 06 09:06:58 localhost.localdomain systemd[1]: Unit snortd.service entered failed state.Dec 06 09:06:58 localhost.localdomain systemd[1]: snortd.service failed.
Eu verifiquei a mensagem do arquivo em /var/log/messages e ele mostra:
Dec 6 09:26:34 localhost journal: unable to get EDID for xrandr-Virtual1: unable to get EDID for output Dec 6 09:30:01 localhost systemd: Started Session 7 of user root.