Re: restart after updated rules?

[Neil Dickey <neil () geol niu edu>]

Chad Gough <chad131 () yahoo com> wrote asking:

> does snort need to be restarted after a rules file (or snort.conf) is
> updated for the new changes to take effect?
[ ... ]
> ie. i add a rule to web-cgi.rules in vi, save and close.  will snort
> pick up the new rule, or do i have to restart snort.

If you're using 'vi' this must be unix ....  ;-)

You do have to reset Snort in order for it to re-read the configuration
file and the rules files after you've made your changes.  On a Solaris
system I do:

  kill -HUP <snort process ID>

You can get the PID by using the 'ps' command.

Best regards,

Neil Dickey, Ph.D.
Research Associate/Sysop
Geology Department
Northern Illinois University
DeKalb, Illinois
60115

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users