Jo Rhett wrote:I'm kindof hoping that there will be some way to get SA to re-read the rules *WITHOUT* restarting the process.
Jonas Eckerman wrote:
Tell the daemon (or whatever) to reload the filter. The daemon creates one or more new SA object without closing it's listening socket/port/whatever. Once the new object(s) are created, it deletes the old.
Good point. I wasn't thinking it through. Focused on other stuff right now :-(
-- Jo Rhett Network/Software Engineer Net Consonance
