Snort mailing list archives

Re: how to disable compile-time reload option?


From: waldo kitty <wkitty42 () windstream net>
Date: Thu, 30 Sep 2010 15:15:24 -0400

On 9/30/2010 15:08, Joel Esler wrote:
The easiest way to fix it would be to remove --enable-reload from your compile options and recompile.

yeah, that's what i'm doing now to test with... i'll probably end up leaving it 
out anyway as it doesn't speed up the (re)loading of snort when the HOME_NET 
and/or DNS_SERVERS (at least) change...


J

On Sep 30, 2010, at 2:58 PM, waldo kitty wrote:


when snort is compiled with "--enable-reload", can it be disabled in snort.conf?

i've not found anything telling how it may be accomplished in snort.conf and my
WAG based on other snort.conf entries failed... i have tried the following and
snort definitely didn't like it...

   config disable_reload


i have found "--disable-attribute-reload-thread" but it seems to be a command
line option only... does this disable reloading via SIGHUP or just the
attributes reloading?

speaking of the above, what exactly is "attributes"?


where is the above coming from? it is stemming from trying to determine why
snort, in my environment, has three threads running instead of one thread...

current compile time options are:

   --enable-gre
   --enable-mpls
   --enable-targetbased
   --enable-decoder-preprocessor-rules
   --enable-ppm
   --enable-perfprofiling
   --enable-zlib
   --enable-reload



------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: