rendered paste body[root@resolute ~]# ps -eaf | grep sguil
sguil 2936 1 0 09:35 ? 00:00:00 tclsh /usr/sbin/sguild -P /var/run/sguil/sguild.pid -O /usr/lib/tls1.5.0/libtls-1.50.so -o -D
sguil 2950 1 0 09:35 ? 00:00:00 /usr/bin/pads -c /etc/sguil/pads-ciscoE1.conf -u sguil -g sguil
sguil 2955 2936 0 09:35 ? 00:00:00 tclsh /usr/sbin/sguild -P /var/run/sguil/sguild.pid -O /usr/lib/tls1.5.0/libtls-1.50.so -o -D
sguil 2956 2936 0 09:35 ? 00:00:00 tclsh /usr/sbin/sguild -P /var/run/sguil/sguild.pid -O /usr/lib/tls1.5.0/libtls-1.50.so -o -D
sguil 2969 1 3 09:35 ? 00:00:16 /usr/sbin/snort -u sguil -g sguil -m 122 -l /var/log/snort-ciscoE1 -c /usr/local/snortrules-ciscoE1/snort.conf -D -i eth1 -o -q -A none -U
sguil 3006 1 0 09:35 ? 00:00:00 tclsh /usr/bin/pads_agent.tcl -D -c /etc/sguil/pads_agent-ciscoE1.conf -O /usr/lib/tls1.5.0/libtls-1.50.so
sguil 3008 3006 0 09:35 ? 00:00:00 cat /nsm/snort_data/ciscoE1/pads.fifo
sguil 3044 1 0 09:35 ? 00:00:00 tclsh /usr/bin/pcap_agent.tcl -D -c /etc/sguil/pcap_agent-ciscoE1.conf -O /usr/lib/tls1.5.0/libtls-1.50.so
sguil 3082 1 0 09:35 ? 00:00:00 tclsh /usr/bin/sancp_agent.tcl -D -c /etc/sguil/sancp_agent-ciscoE1.conf -O /usr/lib/tls1.5.0/libtls-1.50.so
sguil 3100 1 0 09:35 ? 00:00:00 /usr/sbin/snort -u sguil -g sguil -m 122 -l /nsm/snort_data/ciscoE1/dailylogs/2008-02-28 -b -i eth1
sguil 3142 1 0 09:35 ? 00:00:00 tclsh /usr/bin/snort_agent.tcl -D -c /etc/sguil/snort_agent-ciscoE1.conf -O /usr/lib/tls1.5.0/libtls-1.50.so
sguil 3178 1 0 09:35 ? 00:00:00 /usr/bin/barnyard -c /etc/sguil/barnyard-ciscoE1.conf -g /usr/local/snortrules-ciscoE1/gen-msg.map -s /usr/local/snortrules-ciscoE1/sid-msg.map -f snort.log -w /var/log/snort-ciscoE1/waldo.file -p /usr/local/snortrules-ciscoE1/classification.config -X /var/run/sguil/barnyard-ciscoE1.pid -L /var/log/snort-ciscoE1 -a /var/log/snort-ciscoE1/OLD -d /var/log/snort-ciscoE1 -D
sguil 3207 1 0 09:35 ? 00:00:00 /usr/bin/sancp -d /nsm/snort_data/ciscoE1/sancp -i eth1 -u sguil -g sguil -c /etc/sguil/sancp.conf -D
root 3576 3393 0 09:43 pts/0 00:00:00 grep sguil