Snort mailing list archives
Re: restart after updated rules?
From: Neil Dickey <neil () geol niu edu>
Date: Wed, 15 Aug 2001 15:44:53 -0500 (CDT)
Chad Gough <chad131 () yahoo com> wrote asking:
does snort need to be restarted after a rules file (or snort.conf) is updated for the new changes to take effect?
[ ... ]
ie. i add a rule to web-cgi.rules in vi, save and close. will snort pick up the new rule, or do i have to restart snort.
If you're using 'vi' this must be unix .... ;-) You do have to reset Snort in order for it to re-read the configuration file and the rules files after you've made your changes. On a Solaris system I do: kill -HUP <snort process ID> You can get the PID by using the 'ps' command. Best regards, Neil Dickey, Ph.D. Research Associate/Sysop Geology Department Northern Illinois University DeKalb, Illinois 60115 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- restart after updated rules? Chad Gough (Aug 15)
- <Possible follow-ups>
- Re: restart after updated rules? Neil Dickey (Aug 15)