suricata 3.1 源码分析12

太过爱你忘了你带给我的痛 2022-09-25 14:29 133阅读 0赞

原文链接:[http://www.9mblog.com/104.html][http_www.9mblog.com_104.html]  
int engine\_retval = EXIT\_SUCCESS;  
while(1) \{  
if (sigterm\_count) \{  
suricata\_ctl\_flags |= SURICATA\_KILL;  
\} else if (sigint\_count) \{  
suricata\_ctl\_flags |= SURICATA\_STOP;  
\}

if (suricata_ctl_flags & (SURICATA_KILL | SURICATA_STOP)) {
                SCLogNotice("Signal Received.  Stopping engine.");
                break;
            }

若收到引擎退出信号（SURICATA\_KILL或SURICATA\_STOP），则退出循环，执行后续退出操作

TmThreadCheckThreadState();

检查各线程的状态，决定是否进行结束线程、重启线程、终止程序等操作

if (sighup_count > 0) {
                OutputNotifyFileRotation();

循环设置注册文件的flags

sighup_count--;
            }
    
            if (sigusr2_count > 0) {
                if (suri.sig_file != NULL) {
                    SCLogWarning(SC_ERR_LIVE_RULE_SWAP, "Live rule reload not "
                            "possible if -s or -S option used at runtime.");
                    sigusr2_count--;
                } else {
                    if (!(DetectEngineReloadIsStart())) {
                        DetectEngineReloadStart();
                        DetectEngineReload(&suri);
                        DetectEngineReloadSetDone();
                        sigusr2_count--;
                    }
                }
    
            } else if (DetectEngineReloadIsStart()) {
                if (suri.sig_file != NULL) {
                    SCLogWarning(SC_ERR_LIVE_RULE_SWAP, "Live rule reload not "
                            "possible if -s or -S option used at runtime.");
                    DetectEngineReloadSetDone();
                } else {
                    DetectEngineReload(&suri);
                    DetectEngineReloadSetDone();
                }
            }
    
            usleep(10* 1000);
        }

[http_www.9mblog.com_104.html]: http://www.9mblog.com/104.html