On Sat, 2004-08-07 at 10:59, David Cary Hart wrote: > I have snort set up as a service. From the command line I can do > "service snort restart" and it performs precisely as expected. > > Snort requires a restart after log rotate or it follows the old > alert.log. I have tried to do this a) via a cronned script, b) in the > logrotate script and c) by simply cronning the restart command line with > no joy. > > What am I missing? > Don't know if you've gotten an answer, but have you tried. 02 4 * * * root /etc/init.d/snort restart in crontab ?