Support #3134
closedrule reload sometimes not working in worker runmode
Description
When I set the runmode as workers and I use this command 'kill -USR2 $(pidof suricata)' to reload rules.But sometimes suricata doesn't reload rules.
If I change workers mode to autofp and use 'kill -USR2 $(pidof suricata)'.There is no problems.
So I want to know the way to solve this problem.Thank you!
Updated by Andreas Herz over 4 years ago
- Status changed from New to Feedback
- Assignee changed from Victor Julien to OISF Dev
- Target version set to Support
Can you give us more details about your setup?
What version of suricata are you running on what system?
Do you see the rule reload started message at least in the suricata.log?
I saw some cases where the rule reload got stuck.
Updated by John Smith over 4 years ago
ok,there are my steps:
(1) suricata -c /etc/suricata/suricata.yaml -q 0 -q 1 -q 2
(2) kill -USR2 $(pidof suricata)
And the suricata version is 4.0.5,the system is Ubuntu16.04 server.
Then I still use this command 'kill -USR2 $(pidof suricata)',maybe wait 2s,5s or 10s but there are rules reload messages.
And if I use the reload command frequently，sometimes suricata doesn't reload rules and there is no reloa message.
Updated by Victor Julien over 4 years ago
Can you try 4.1.4? We did a fix in the 4.1.x series.
Updated by Victor Julien over 4 years ago
- Subject changed from The worker mode to rule reload something not working in worker runmode
- Status changed from Feedback to Closed
Updated by Victor Julien over 4 years ago
- Subject changed from rule reload something not working in worker runmode to rule reload sometimes not working in worker runmode