Re: snort 1.87beta5 still holds some fds on HUP(fixed)

["Michael Scheidell" <scheidell () secnap net>]

not in snort1.87beta6 yet.

it DOES stop opening additional bpf's, but it still keeps the tcp FILTER
file opened:
 lsof | grep bpf
snort     166      root    3r  VREG 116,262149         19  476837
/usr/local/share/snort/snort.bpf
snort     166      root    4r  VCHR       23,0  0t1289300    7187 /dev/bpf0
scanner# killall -HUP snort
scanner# lsof | grep bpf
snort     166      root    3r  VREG 116,262149         19  476837
/usr/local/share/snort/snort.bpf
snort     166      root    4r  VREG 116,262149         19  476837
/usr/local/share/snort/snort.bpf
snort     166      root    5r  VCHR       23,0     0t5416    7187 /dev/bpf0
scanner# snort -V

-*> Snort! <*-
Version 1.8.7beta6 (Build 121)

Michael Scheidell
SECNAP Network Security, LLC
(561) 368-9561 scheidell () secnap net

http://www.secnap.net


_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users