Re: [Snort-inline-users] Re: Restarting snort_inline with SIGHUP.

[Will M. <wil...@gm...>]

Nick,

Oops, it was late, I missed the HUP part of that.  Yeah, we need
ipq_destroy_handle in Restart() as well, so thanks.

Regards,

Will

On 5/24/05, Nick Rogness <ni...@ro...> wrote:
> On Mon, 23 May 2005, Will Metcalf wrote:
>=20
> >>        The question is does sending a SIGHUP normally restart
> >>        snort_inline?
> >
> > yup
> >
> > Take a look at CleanExit() in snort.c, we nuke our ipq_handle with
> > ipq_destroy_handle, not sure what the IPFW equivalent is.
>=20
>        It doesn't appear that you are destroying the ipq handle when a
>        SIGHUP is received (via Restart()).  It looks only like it is
>        referenced inside of CleanExit(), which is not called during a
>        SIGHUP.  I don't know if destroying the ipq handle is necessary
>        during a SIGHUP or not, but I added your destroy code inside of
>        Restart just as it is in CleanExit().
>=20
>        Attached a 3 diff files to be patched against 2.3.0-RC1.  This
>        includes the ipq_destroy stuff added in Restart().  If that isn't
>        necessary, I can take it out and resubmit the patch.
>=20
> Nick Rogness <ni...@ro...>
> -
>   How many people here have telekenetic powers? Raise my hand.
>                                -Emo Philips
>=20
>=20
>