Project

General

Profile

Actions
Copy link

Feature #2681

open

Reloading of categories file, IP reputation list during rule live reload

Added by Dan Wallmeyer about 6 years ago. Updated over 4 years ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

I first brought this up at the Advanced Suricata Training in Vancouver. Currently when a live rule reload is performed (SIGUSR2), only the rule file is reloaded.

If there are rules that are a part of a new category, the live reload does not reload the categories file and rules fail.
My current work around is to fully restart Suricata, which works but is not ideal.

Ideally the live reload would also reload the categories file.
Additionally I believe that any file needed by signatures such as the ip reputation list and references definition/config file should also be reloaded as they could be referenced by new rules.

If you need more info or feedback please let me know.

Thanks,
Dan

Actions
Copy link

Also available in: Atom PDF