[Snort-users] restart snort after pulledpork updates ?

Eugeniu Babin eugen.babin at ...11827...
Wed Jan 21 13:20:18 EST 2015


Hi All,
I observed an interesting thing.
I have snort running for days with outputs in console (not in daemon mode).
Once pulled pork is finished with rules updates, in my console I see many
messages like:
Dynamic Rule [3:8351] was not initialized properly.
Dynamic Rule [3:15912] was not initialized properly.
Dynamic Rule [3:16533] was not initialized properly.
Dynamic Rule [3:7019] was not initialized properly.
Dynamic Rule [3:26877] was not initialized properly.
Dynamic Rule [3:16533] was not initialized properly.
Dynamic Rule [3:8351] was not initialized properly.
Dynamic Rule [3:16533] was not initialized properly.
Dynamic Rule [3:8351] was not initialized properly.
Dynamic Rule [3:16533] was not initialized properly.
Dynamic Rule [3:8351] was not initialized properly.
Dynamic Rule [3:16533] was not initialized properly.
Dynamic Rule [3:8351] was not initialized properly.

I fix this issue by simply restarting snort process.
So the question now:
Should I restart snort process always after pulledpork updated the ruleset ?

Many Thanks,
Eugene
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150121/c3497a9d/attachment.html>


More information about the Snort-users mailing list