fake start with status_services.php and installed packages
On status_services.php a process is said to be running if the <executable>snort</executable> name is in ps | grep. Example 'ps | grep snort'. If another process has the executable tag name (snort) anywhere in 'ps' the status_services.php will say it is running when its not.
Stop all snort processes. In the terminal type ee /var/log/snort_error.php then go to the status_services.php page.
You will see snort is said to be running when it is not running.
Package maintainers need to add the process path to the executable tag. Moreover, a longer unique executable tag is even less prone to this error.