Suricata
  • 1. What is Suricata
  • 2. Quickstart guide
  • 3. Installation
  • 4. Upgrading
  • 5. Security Considerations
  • 6. Support Status
  • 7. Command Line Options
  • 8. Suricata Rules
  • 9. Rule Management
    • 9.1. Rule Management with Suricata-Update
    • 9.2. Adding Your Own Rules
    • 9.3. Rule Reloads
    • 9.4. Rules Profiling
  • 10. Making sense out of Alerts
  • 11. Performance
  • 12. Configuration
  • 13. Reputation
  • 14. Init Scripts
  • 15. Output
  • 16. Lua support
  • 17. File Extraction
  • 18. Public Datasets (PCAPs)
  • 19. Using Capture Hardware
  • 20. Interacting via Unix Socket
  • 21. Plugins
  • 22. IPS Mode
  • 23. Firewall Mode
  • 24. 3rd Party Integration
  • 25. Man Pages
  • 26. Acknowledgements
  • 27. Licenses
  • 28. Suricata Developer Guide
  • 29. Verifying Suricata Source Distribution Files
  • 30. Appendix
  • 31. Known Issues
Suricata
  • 9. Rule Management
  • View page source

9. Rule Management

  • 9.1. Rule Management with Suricata-Update
    • 9.1.1. Updating your rules
    • 9.1.2. Using other rulesets
    • 9.1.3. Controlling which rules are used
    • 9.1.4. Further reading
  • 9.2. Adding Your Own Rules
  • 9.3. Rule Reloads
    • 9.3.1. Reload Triggers
      • 9.3.1.1. Via process signal
      • 9.3.1.2. Via the UNIX domain socket
        • 9.3.1.2.1. Blocking reload
        • 9.3.1.2.2. Non-blocking reload
    • 9.3.2. Resources Reloaded
    • 9.3.3. When to reload rules
    • 9.3.4. Advanced: Rule Reload Steps
  • 9.4. Rules Profiling
Previous Next

© Copyright 2016-2026, OISF.

Built with Sphinx using a theme provided by Read the Docs.