Re: Reload rules w/o restarting ?

[Erek Adams <erek () theadamsfamily net>]

On Fri, 12 Oct 2001, james wrote:

> Is there any way to reload rules (after making changes) without restarting
> snort ?

Well...  Yes and No.  :)  Yes, you can send it a SIGHUP and snort will reload
everything.  But, that reload is via the execv(2) system call.  Due to the way
execv(2) works, it _restarts_ snort.  So 'yes' you can reload rules w/o
manually killing and restarting snort.  But 'no' it doesn't work as you'd
wish.  :-/

See the FAQ (from CVS) and question 6.19.

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users