[Bro] Append instead of overwrite

James Lay jlay at slave-tothe-box.net
Fri Aug 15 04:59:46 PDT 2014


On Thu, 2014-07-17 at 09:33 -0600, James Lay wrote:

> Hey All,
> 
> So I run bro instead of broctl.  Currently, if I stop a running bro, 
> and start it again, bro overwrites any previous log files...is there a 
> way to change this behavior?  Thank you.
> 
> James
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro


Any takers on this?   Would be really nice not to have to move the
current logs every time I want to test something.  Thanks all.

James
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140815/12866cad/attachment.html 


More information about the Bro mailing list