Topic: Restarting Guardian

[Mark]

Using SME 5.1.2 with snort and guardian.  I updated my guardian.ignore file with addresses I want to ignore.  How do I restart guardian?  Do I have to use IP numbers or can I use dns names?

Thanks

[RayG]

I find the process id with "ps -aux" and then kill the currently running copy of guardian. Then I restart Guardian with "/etc/rc.d/init.c/guardiand start". There doesn't seem to be a stop or restart option as far as I can tell.

[author]

Try the parent process.

service snortd restart

seems to restart guardian, at least the changes I make to /etc/guardian.ignore are applied.