Snort mailing list archives

Re: snort 2.9.0.3 bug? SIGUSR1 broken?


From: Michael Scheidell <michael.scheidell () secnap com>
Date: Sat, 29 Jan 2011 12:07:26 -0500

On 1/29/11 8:20 AM, Joel Esler wrote:
Kill -USR1<pid of snort>

Works for me on my box.

solved:
snort 2.8.6.1 port for freebsd never included option for targeted hosts.
port for 2.9.0.3 that I am working on has that option.
if you compile snort 2.9.0.3 without targeted hosts, SIGUSR1 (no matter what number it is) works. Note: that the snort manual says that sending a signal 30 to snort will reload the hosts attributes table. on odd versions of unixlike os's that use signal 10 as SIGUSR1 this might not have affected snort. on posix unix's (*BSD's), SIGUSR1 is always 30.


--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
ISN: 1259*1300
>*| *SECNAP Network Security Corporation

   * Certified SNORT Integrator
   * 2008-9 Hot Company Award Winner, World Executive Alliance
   * Five-Star Partner Program 2009, VARBusiness
   * Best in Email Security,2010: Network Products Guide
   * King of Spam Filters, SC Magazine 2008


______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________  
------------------------------------------------------------------------------
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: