robin at icir.org
Tue Sep 24 14:01:18 PDT 2013
On Mon, Sep 23, 2013 at 21:51 +0800, Po-Ching Lin wrote:
> I would like to append the logs in the current run to existing logs.
Bro 2.x doesn't support that anymore as the logs no longer use the
open*() functions but go through the internal logging system. You
could work around it by definining a post-processor which takes the
log file and copies/appends it to somewhere else.
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org/robin
More information about the Bro