Snort mailing list archives
restart snort after pulledpork updates ?
From: Eugeniu Babin <eugen.babin () gmail com>
Date: Wed, 21 Jan 2015 19:20:18 +0100
Hi All, I observed an interesting thing. I have snort running for days with outputs in console (not in daemon mode). Once pulled pork is finished with rules updates, in my console I see many messages like: Dynamic Rule [3:8351] was not initialized properly. Dynamic Rule [3:15912] was not initialized properly. Dynamic Rule [3:16533] was not initialized properly. Dynamic Rule [3:7019] was not initialized properly. Dynamic Rule [3:26877] was not initialized properly. Dynamic Rule [3:16533] was not initialized properly. Dynamic Rule [3:8351] was not initialized properly. Dynamic Rule [3:16533] was not initialized properly. Dynamic Rule [3:8351] was not initialized properly. Dynamic Rule [3:16533] was not initialized properly. Dynamic Rule [3:8351] was not initialized properly. Dynamic Rule [3:16533] was not initialized properly. Dynamic Rule [3:8351] was not initialized properly. I fix this issue by simply restarting snort process. So the question now: Should I restart snort process always after pulledpork updated the ruleset ? Many Thanks, Eugene
------------------------------------------------------------------------------ New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- restart snort after pulledpork updates ? Eugeniu Babin (Jan 21)
- Re: restart snort after pulledpork updates ? waldo kitty (Jan 21)
- Re: restart snort after pulledpork updates ? Joel Esler (jesler) (Jan 21)
- <Possible follow-ups>
- Re: restart snort after pulledpork updates ? Eugeniu Babin (Jan 22)
- Re: restart snort after pulledpork updates ? Anthony Sheetz (Jan 22)
- Re: restart snort after pulledpork updates ? waldo kitty (Jan 21)