restart snort after pulledpork updates ?

[Eugeniu Babin <eugen.babin () gmail com>]

Hi All,
I observed an interesting thing.
I have snort running for days with outputs in console (not in daemon mode).
Once pulled pork is finished with rules updates, in my console I see many
messages like:
Dynamic Rule [3:8351] was not initialized properly.
Dynamic Rule [3:15912] was not initialized properly.
Dynamic Rule [3:16533] was not initialized properly.
Dynamic Rule [3:7019] was not initialized properly.
Dynamic Rule [3:26877] was not initialized properly.
Dynamic Rule [3:16533] was not initialized properly.
Dynamic Rule [3:8351] was not initialized properly.
Dynamic Rule [3:16533] was not initialized properly.
Dynamic Rule [3:8351] was not initialized properly.
Dynamic Rule [3:16533] was not initialized properly.
Dynamic Rule [3:8351] was not initialized properly.
Dynamic Rule [3:16533] was not initialized properly.
Dynamic Rule [3:8351] was not initialized properly.

I fix this issue by simply restarting snort process.
So the question now:
Should I restart snort process always after pulledpork updated the ruleset ?

Many Thanks,
Eugene

------------------------------------------------------------------------------
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!