With the new snort being downloaded in full for every IPS update, will we receive a mail notification about snort restarting, so far today I have received 2 notifications?
Usually I try and wait until the midnight rollover before getting very excited about things like this. But in this case I had seen a couple in 8.900 which I ignored, then the same thing started again 8.910, so I thought I would ask.
If the messages repeat I will hunt through the logs to identify the culprit.
