[root@resolute bin]# ps aux | grep snort sguil 3789 0.0 0.0 3708 480 ? S 10:22 0:00 tail -n 1 -f /nsm/snort_data/ciscoE1/snort.stats sguil 6383 0.0 0.3 22188 15500 ? S 10:56 0:00 /usr/bin/barnyard -c /etc/sguil/barnyard-wstaff.conf -g /usr/local/snortrules-wstaff/gen-msg.map -s /usr/local/snortrules-wstaff/sid-msg.map -f snort.log -w /var/log/snort-wstaff/waldo.file -p /usr/local/snortrules-wstaff/classification.config -X /var/run/sguil/barnyard-wstaff.pid -L /var/log/snort-wstaff -a /var/log/snort-wstaff/OLD -d /var/log/snort-wstaff -D sguil 6405 0.0 0.0 3396 984 ? Ss 10:56 0:01 /usr/bin/sancp -d /nsm/snort_data/wstaff/sancp -i bond2 -u sguil -g sguil -c /etc/sguil/sancp.conf -D sguil 6415 0.1 0.0 14328 1168 pts/1 S 10:56 0:02 /usr/sbin/snort -u sguil -g sguil -m 122 -l /nsm/snort_data/wstaff/dailylogs/2008-02-29 -b -i bond2 sguil 6691 0.0 0.0 3396 1040 ? Ss 10:57 0:01 /usr/bin/sancp -d /nsm/snort_data/wstaff/sancp -i bond2 -u sguil -g sguil -c /etc/sguil/sancp.conf -D sguil 6701 0.1 0.0 14324 1160 pts/1 S 10:57 0:02 /usr/sbin/snort -u sguil -g sguil -m 122 -l /nsm/snort_data/wstaff/dailylogs/2008-02-29 -b -i bond2 sguil 6745 0.0 0.0 4972 1156 ? S 10:57 0:00 tclsh /usr/bin/snort_agent.tcl -D -c /etc/sguil/snort_agent-wstaff.conf -O /usr/lib/tls1.5.0/libtls-1.50.so sguil 6938 0.0 0.0 3688 424 ? S 10:58 0:00 cat /nsm/snort_data/wstaff/pads.fifo sguil 7720 0.0 0.0 3708 480 ? S 11:02 0:00 tail -n 1 -f /nsm/snort_data/ciscoE1/snort.stats root 8210 0.0 0.0 3900 668 pts/1 S+ 11:20 0:00 grep snort [root@resolute bin]#