Snort mailing list archives

Re: Reload rules with out restarting snort completly


From: Joel Esler <joel.esler () sourcefire com>
Date: Sat, 3 Sep 2005 10:17:09 -0400


No, it's not possible at the moment and perhaps never will..


And furthermore, it may be possible in the future.

But right now, no, you have to stop the running process (whether it be through HUP or kill and restart), in order to re-read the rules files.

Joel Esler, GCIA
joel.esler () sourcefire com
(706) 627-2101
Security Consultant
Sourcefire -- Security for the Real World
http://www.sourcefire.com | http://www.snort.org

Current thread: