[Bro] Log rotation and /dev/null with broctl

Jim Mellander jmellander at lbl.gov
Mon Oct 18 11:15:06 PDT 2010

On Mon, Oct 18, 2010 at 11:05 AM, Matthias Vallentin <vallentin at icir.org>wrote:

> <snip>

> This is also weird:
>    % file /dev/null
>    /dev/null: ASCII text
>    % more /dev/null
>    title
> It almost seems that broctl overwrote /dev/null. Does that make any
> sense?
> seen this happen when redirection goes bad:

Instead of

rm my_file >/dev/null

the redirection is accidentally missed:

rm my_file /dev/null
(obviously only works with privs in /dev)

then the next process redirecting to  /dev/null creates a text file.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20101018/0192e7ad/attachment.html 

More information about the Bro mailing list