[Bro] Re: Bro Packet Trace Dumps.
sommer at in.tum.de
Thu Apr 7 00:02:17 PDT 2005
On Wed, Mar 30, 2005 at 14:24 -0600, aashish at uiuc.edu wrote:
> Is it possible to set up bro to define the size at which bulk trace file should roll over
> and not have any other log files roll over (even if the bulk trace files roll over at 2G) ?
Not right now. You can have the bulk trace file rolled over by setting
log_max_size and adding its filename to RotateLogs::aux_files (see
rotate-logs.bro). But then log_max_size affects all log files for which no
explicit size has been defined with &rotate_size.
Robin Sommer * Room 01.08.055 * www.net.in.tum.de
TU Muenchen * Phone (089) 289-18006 * sommer at in.tum.de
More information about the Bro