Re: snort 2.9.0.3 bug? SIGUSR1 broken?

[Russ Combs <rcombs () sourcefire com>]

Sorry, I understood your question but not the platform you specified.
On Jan 29, 2011 12:04 AM, "Michael Scheidell" <michael.scheidell () secnap com>
wrote:
> On 1/28/11 10:51 PM, Russ Combs wrote:
> > kill -10
> maybe you misunderstood.
>
> I want to send a SIGUSR1 to snort in order to get the thing to dump
> packet stats to syslog.
> man page says I can do it.
>
> it worked on snort 2.8.6.1 (up through snort 2.8.6.1)
>
> it doesn't work now. it used to work.. let me repeat the question, in
> cause you misunderstood and thought I was looking for a way to kill
> snort and not looking for a way to get the packet stats to dump to
> syslog (since a signal number 10 is a SIGBUS and not a SIGUSR1)
> or to put it a different way, SIGUSR1 is signal number 31, not signal 10.
> so, thanks for telling me how to kill snort a different way.
>
> kill -10 is SIGBUS, and does exactly what you think it would: kill it.
>
> Jan 28 23:56:46 scanner2 kernel: pid 91719 (snort), uid 999: exited on
> signal 10
> Jan 28 23:56:51 scanner2 kernel: pid 91717 (snort), uid 999: exited on
> signal 10
>
> --
> Michael Scheidell, CTO
> o: 561-999-5000
> d: 561-948-2259
> ISN: 1259*1300
> > *| *SECNAP Network Security Corporation
>
> * Certified SNORT Integrator
> * 2008-9 Hot Company Award Winner, World Executive Alliance
> * Five-Star Partner Program 2009, VARBusiness
> * Best in Email Security,2010: Network Products Guide
> * King of Spam Filters, SC Magazine 2008
>
>
> ______________________________________________________________________
> This email has been scanned and certified safe by SpammerTrap(r).
> For Information please see http://www.secnap.com/products/spammertrap/
> ______________________________________________________________________
------------------------------------------------------------------------------
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users