Apache and SNORT conflict?
I'm trying to figure out why my apache2 server gets shutdown. This has happened a couple of times over the last few days and I've found out that the error logs are empty (/var/log/apache2/error.log)! From the /var/log/apache2/error.log.1 I've found these lines
[Sat Oct 18 11:35:14 2008] [notice] Apache configured -- resuming normal operations
[Sun Oct 19 07:37:15 2008] [notice] caught SIGTERM, shutting down
I had restarted the Apache on Oct 18 11:35:14 2008. I'm not sure what is causing the shutdown the next day at 7:37 am
I have SNORT running too and found this in the syslog
Oct 19 07:37:16 webserver snort: Log directory = /var/log/snort
Oct 19 07:37:16 webserver snort: Snort initialization completed successfully (pid=3658)
There are many more lines above this that logs all the things SNORT is doing and most of the things are at 07:37:15. It seems that SNORT is sending the shutdown? However, I've not made any changes to SNORT for last 1 month and the only changes to Apache I've made is to add a virtual host
I'm not sure where to start looking now, please help!