Snort mailing list archives
Re: Reload rules with out restarting snort completly
From: Joel Esler <joel.esler () sourcefire com>
Date: Sat, 3 Sep 2005 10:17:09 -0400
No, it's not possible at the moment and perhaps never will..
And furthermore, it may be possible in the future.But right now, no, you have to stop the running process (whether it be through HUP or kill and restart), in order to re-read the rules files.
Joel Esler, GCIA joel.esler () sourcefire com (706) 627-2101 Security Consultant Sourcefire -- Security for the Real World http://www.sourcefire.com | http://www.snort.org
Current thread:
- Reload rules with out restarting snort completly Pablo Nebrera (Sep 02)
- Re: Reload rules with out restarting snort completly Michael Boman (Sep 02)
- Re: Reload rules with out restarting snort completly Frank Knobbe (Sep 02)
- Re: Reload rules with out restarting snort completly Andreas Östling (Sep 02)
- Re: Reload rules with out restarting snort completly Frank Knobbe (Sep 02)
- Re: Reload rules with out restarting snort completly Joel Esler (Sep 03)
- Re: Reload rules with out restarting snort completly Frank Knobbe (Sep 02)
- Re: Reload rules with out restarting snort completly Michael Boman (Sep 02)