https://redmine.openinfosecfoundation.org/https://redmine.openinfosecfoundation.org/favicon.ico?17011170022019-08-30T19:23:46ZOpen Information Security FoundationSuricata - Support #3134: rule reload sometimes not working in worker runmodehttps://redmine.openinfosecfoundation.org/issues/3134?journal_id=134432019-08-30T19:23:46ZAndreas Herzoisf@herzandreas.de
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Feedback</i></li><li><strong>Assignee</strong> changed from <i>Victor Julien</i> to <i>OISF Dev</i></li><li><strong>Target version</strong> set to <i>Support</i></li></ul><p>Can you give us more details about your setup?<br />What version of suricata are you running on what system?<br />Do you see the rule reload started message at least in the suricata.log?<br />I saw some cases where the rule reload got stuck.</p> Suricata - Support #3134: rule reload sometimes not working in worker runmodehttps://redmine.openinfosecfoundation.org/issues/3134?journal_id=134582019-09-02T07:31:12ZJohn Smith
<ul></ul><p>ok,there are my steps:<br />(1) suricata -c /etc/suricata/suricata.yaml -q 0 -q 1 -q 2<br />(2) kill -USR2 $(pidof suricata)<br />And the suricata version is 4.0.5,the system is Ubuntu16.04 server.<br />Then I still use this command 'kill -USR2 $(pidof suricata)',maybe wait 2s,5s or 10s but there are rules reload messages.<br />And if I use the reload command frequently,sometimes suricata doesn't reload rules and there is no reloa message.</p> Suricata - Support #3134: rule reload sometimes not working in worker runmodehttps://redmine.openinfosecfoundation.org/issues/3134?journal_id=134592019-09-02T07:36:58ZVictor Julienvictor@inliniac.net
<ul></ul><p>Can you try 4.1.4? We did a fix in the 4.1.x series.</p> Suricata - Support #3134: rule reload sometimes not working in worker runmodehttps://redmine.openinfosecfoundation.org/issues/3134?journal_id=134612019-09-02T08:00:46ZJohn Smith
<ul></ul><p>ok,I will try the 4.1.4.Thank you.</p> Suricata - Support #3134: rule reload sometimes not working in worker runmodehttps://redmine.openinfosecfoundation.org/issues/3134?journal_id=138542019-09-26T07:43:14ZVictor Julienvictor@inliniac.net
<ul><li><strong>Subject</strong> changed from <i>The worker mode</i> to <i>rule reload something not working in worker runmode</i></li><li><strong>Status</strong> changed from <i>Feedback</i> to <i>Closed</i></li></ul> Suricata - Support #3134: rule reload sometimes not working in worker runmodehttps://redmine.openinfosecfoundation.org/issues/3134?journal_id=138552019-09-26T07:43:30ZVictor Julienvictor@inliniac.net
<ul><li><strong>Subject</strong> changed from <i>rule reload something not working in worker runmode</i> to <i>rule reload sometimes not working in worker runmode</i></li></ul>