[Oisf-users] How to stop suricata ?

[Eric Leblond]

Hello,

On Wed, 2011-12-14 at 17:18 +0100, phillip at bailey.st wrote:
> On 12/14/2011 05:14 PM, Eric Leblond wrote:
> > Hello,
> > 
> > On Wed, 2011-12-14 at 17:11 +0100, phillip at bailey.st wrote:
> >> Hello everyone,
> >>
> >> I'm wondering if there's a smart way to stop Suricata when
> >> it runs in daemon mode, killall doesn't have any effect.
> > 
> > Killall should stop it cleanly.
> > 
> > In which mode are you running ?
> > 
> > BR,
> > 
> >>
> >> Best,
> >>
> >> Phillip
> >>
> >>
> >> _______________________________________________
> >> Oisf-users mailing list
> >> Oisf-users at openinfosecfoundation.org
> >> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> > 
> 
> 
> I'm running suricata in Daemon mode,

I was meaning, PF_RING, pcap, AF_PACKET ?

PF_RING has a known issue (We're currently working on it with Luca) and
it may refuse to quit if there is no packet on the interface.

BR,

> 
> anyway I'm working on something like this
> 
> PIDFILE=/var/run/suricata.pid
> PID=$(cat $PIDFILE)
> kill -9 $PID
> 
> so far works fine.
> 
> Phillip
> 
> 

-- 
Eric Leblond 
Blog: http://home.regit.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
Url : http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20111214/be30db52/attachment.bin