[root@resolute bin]# ps aux | grep snort
sguil     3789  0.0  0.0   3708   480 ?        S    10:22   0:00 tail -n 1 -f /nsm/snort_data/ciscoE1/snort.stats
sguil     6415  0.1  0.0  14328  1168 pts/1    S    10:56   0:02 /usr/sbin/snort -u sguil -g sguil -m 122 -l /nsm/snort_data/wstaff/dailylogs/2008-02-29 -b -i bond2
sguil     7720  0.0  0.0   3708   480 ?        S    11:02   0:00 tail -n 1 -f /nsm/snort_data/ciscoE1/snort.stats
sguil     8367  0.0  0.0   3688   420 ?        S    11:21   0:00 cat /nsm/snort_data/ciscoE1/pads.fifo
sguil     8470  0.0  0.3  22188 15656 ?        S    11:21   0:00 /usr/bin/barnyard -c /etc/sguil/barnyard-ciscoE1.conf -g /usr/local/snortrules-ciscoE1/gen-msg.map -s /usr/local/snortrules-ciscoE1/sid-msg.map -f snort.log -w /var/log/snort-ciscoE1/waldo.file -p /usr/local/snortrules-ciscoE1/classification.config -X /var/run/sguil/barnyard-ciscoE1.pid -L /var/log/snort-ciscoE1 -a /var/log/snort-ciscoE1/OLD -d /var/log/snort-ciscoE1 -D
sguil     8485  9.8  3.0 146952 127212 ?       Ss   11:21   0:07 /usr/sbin/snort -u sguil -g sguil -m 122 -l /var/log/snort-ciscoE1 -c /usr/local/snortrules-ciscoE1/snort.conf -D -i eth1 -o -q -A none -U
sguil     8493  0.0  0.0   3396   980 ?        Ss   11:21   0:00 /usr/bin/sancp -d /nsm/snort_data/ciscoE1/sancp -i eth1 -u sguil -g sguil -c /etc/sguil/sancp.conf -D
sguil     8503  0.4  0.0  14324  1160 pts/0    S    11:21   0:00 /usr/sbin/snort -u sguil -g sguil -m 122 -l /nsm/snort_data/ciscoE1/dailylogs/2008-02-29 -b -i eth1
sguil     8547  0.0  0.0   5092  1228 ?        S    11:21   0:00 tclsh /usr/bin/snort_agent.tcl -D -c /etc/sguil/snort_agent-ciscoE1.conf -O /usr/lib/tls1.5.0/libtls-1.50.so
sguil     8548  0.0  0.0   3708   480 ?        S    11:21   0:00 tail -n 1 -f /nsm/snort_data/ciscoE1/snort.stats
root      8802  0.0  0.0   3896   668 pts/1    S+   11:22   0:00 grep snort