[Zeek] R: signature update without restarting zeek

Christopher M. Hobbs christopher.hobbs at corelight.com
Wed Aug 7 09:13:39 PDT 2019



On 8/7/19 11:11 AM, Palumbo Mauro wrote:
> Hi Christopher,
>   I am aware of the input framework feature REREAD and in fact I already used it for other files. However, it is my understanding that this cannot be used for signatures files. But I'll be glad to be wrong on this point... :-)


Very well!  Sorry for misunderstanding the scope.  I'm sure someone will
be able to fill us both in on possible options!

cmh


More information about the Zeek mailing list