Snort mailing list archives

Re: changing HOME_NET variable without reloading completely


From: Jack Pepper <pepperjack () afferentsecurity com>
Date: Wed, 22 Feb 2017 18:44:51 -0600

one option would be to load HOME_NET on the command line with the " -S "
option and not specify it in the config.  Although that is still a reload,
your config file doesn't change.

On Wed, Feb 22, 2017 at 5:10 PM, <greg.mcnathansonsnuf003 () gmx-topmail de>
wrote:

Everytime I get a new public IP (dynamic IP) from my ISP (Internet Service
Provider) (and this happens very often), I have to change the HOME_NET
variable in the snort configuration file and then reload all rules and
configuration completely. Unfortunately this means time consuming and cpu
intensive workload. I have created a script for this, but this doesn't
avoid the intensive reload workload.

Is there a workaround for this?

Or better can you change the HOME_NET variable where it is used without a
complete reload?


------------------------------------------------------------
------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest
Snort news!

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: