Snort mailing list archives

Re: snort 2.9.0.3 bug? SIGUSR1 broken?


From: Michael Altizer <xiche () verizon net>
Date: Sat, 29 Jan 2011 01:46:46 -0500

On 01/29/2011 01:13 AM, Michael Scheidell wrote:


On 1/29/11 1:06 AM, Russ Combs wrote:
Sorry, I understood your question but not the platform you specified.
which platform needs a SIGBUS (signal number 10)  to dump stats to syslog?
isn't it SIGUSR1 on all supported platforms?
doesn't the man page say SIGUSR1 (30)? doesn't the manual say SIGUSR1 (30)?

and if you understood my question, how could 'kill -10' possibly answer it?
signal 10 is  BUSERROR on every posix system that I know of.

and, what does my platform have to do with anything?
you got some strange TRS80 that uses 10 as SIGUSR1?

Actually, if you read the signal(7) man page you'll see that the POSIX specification is pretty loose with a number of the signal value definitions. SIGUSR1 can be 30, 10, or 16. For example, x86-based Linux, which could be considered a relatively non-obscure operating system, defines SIGUSR1 as 10. In fact, the only flavors of Linux that use 30 for SIGUSR1 are DEC Alpha and SPARC. And since you asked, SIGBUS can be either 7 or 10.

-Michael
------------------------------------------------------------------------------
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: