Re: [Snort-inline-users] Re: Restarting snort_inline with SIGHUP.

[Nick R. <ni...@ro...>]

On Mon, 23 May 2005, Will Metcalf wrote:

>>        The question is does sending a SIGHUP normally restart
>>        snort_inline?
>
> yup
>
> Take a look at CleanExit() in snort.c, we nuke our ipq_handle with 
> ipq_destroy_handle, not sure what the IPFW equivalent is.

 	It doesn't appear that you are destroying the ipq handle when a
 	SIGHUP is received (via Restart()).  It looks only like it is
 	referenced inside of CleanExit(), which is not called during a
 	SIGHUP.  I don't know if destroying the ipq handle is necessary
 	during a SIGHUP or not, but I added your destroy code inside of
 	Restart just as it is in CleanExit().

 	Attached a 3 diff files to be patched against 2.3.0-RC1.  This
 	includes the ipq_destroy stuff added in Restart().  If that isn't
 	necessary, I can take it out and resubmit the patch.

Nick Rogness <ni...@ro...>
-
   How many people here have telekenetic powers? Raise my hand.
   				-Emo Philips