Snort mailing list archives
Re: ADdRules
From: Matt Kettler <mkettler () evi-inc com>
Date: Sun, 12 May 2002 23:03:49 -0400
Hmm, is this a request for help, or a commentary? If it's a request for help I'd suggest at least including a bit of your code, and perhaps using the devel mailing list instead of the users mailing list.
Is there a reason why you need to do this and just adding the rules to a file included by the standard ruleset and using SIGHUP isn't fast enough? (ie: is having snort offline for a few hundred milliseconds really that critical to your network?)
At 02:50 PM 5/12/2002 +0300, dareen wrote:
hi i am trying to modify my snort source code to add a new rule without restarting it. whenevr i want to add a rule, i put it in a file and signal snort. I added a signal handler to parse that rules file whenevr signaled. it didn't work. actually it deletes all the previous rules from the linked list. Dareen
_______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: bandwidth () sourceforge net _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- ADdRules dareen (May 12)
- Re: ADdRules Matt Kettler (May 12)