Impact of HUPping bro process


Curious...I don't use broctl, choosing instead to run bro. What is the impact of HUPping the current running bro process? Will it re-read the local.bro for example? Or something else? Thank you.


Nothing. Well, let me backpedal a bit. It will force Bro to checkpoint all persistent state to disk but that feature of Bro isn’t used very much (and we don’t recommend using it much either due to various problems with it).

If you want to update the scripts that Bro is running you have to restart Bro in almost all cases.


Good info…thanks Seth.