[Bro] Impact of HUPping bro process

James Lay jlay at slave-tothe-box.net
Wed Apr 9 06:11:52 PDT 2014


On Wed, 2014-04-09 at 09:06 -0400, Seth Hall wrote:

> On Apr 4, 2014, at 1:35 PM, James Lay <jlay at slave-tothe-box.net> wrote:
> 
> > Curious...I don't use broctl, choosing instead to run bro.  What is the 
> > impact of HUPping the current running bro process?
> 
> Nothing.  Well, let me backpedal a bit.  It will force Bro to checkpoint all persistent state to disk but that feature of Bro isn’t used very much (and we don’t recommend using it much either due to various problems with it).
> 
> If you want to update the scripts that Bro is running you have to restart Bro in almost all cases.
> 
>   .Seth
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/
> 


Good info..thanks Seth.

James
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140409/814cd2cc/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 490 bytes
Desc: This is a digitally signed message part
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140409/814cd2cc/attachment.bin 


More information about the Bro mailing list