2016-06-16 11:36 GMT+03:00 Jaren Peich <burkol...@gmail.com>:
> Hi,
>
> Is it possible to restart or reload sec file rules from a sec rule?. I´m
> using sec 2.6.2 over windows.
>
> Thank you. Regards.
>
If you are using cygwin perl which properly supports all signals, you can
use the following rule:
type=single
ptype=substr
pattern=RELOAD
desc=reload sec rule files that have been modified
action=lcall %o -> ( sub { kill(ABRT, $$) } )
Whenever the string RELOAD is seen in any of the input files, this rule
will send the SIGABRT signal to the current process ($$ variable denotes
the PID of the current process).
hope this helps,
risto
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://pubads.g.doubleclick.net/gampad/clk?id=1444514421&iu=/41014381
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
