[Bro] Log rotation and /dev/null with broctl
vallentin at icir.org
Mon Oct 18 11:40:29 PDT 2010
> Do you have open_log_file("/dev/null") somewhere in one of your policy
Indeed, I could find the following
# Save us some disk I/O.
redef notice_file = open("/dev/null");
redef bro_alarm_file = open("/dev/null");
redef Weird::weird_file = open("/dev/null");
which I replaced with
to get rid of the error. Thanks for the hint.
More information about the Bro