[Bro] Append instead of overwrite
seth at icir.org
Fri Aug 15 11:13:39 PDT 2014
On Aug 15, 2014, at 11:53 AM, James Lay <jlay at slave-tothe-box.net> wrote:
> To give me an option to append instead of overwrite. I imagine that
> since broctl does all the file management that this could be a command
> line option...
Ah! You just want to have file management (and perhaps full rotation?) added as a standalone script and not something that is added by broctl?
Johanna is right that with our current logging scheme we can't really append log files for multiple reasons but I could certainly pull together something that would give you decent log rotation without running broctl.
International Computer Science Institute
(Bro) because everyone has a network
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140815/2588f89f/attachment.bin
More information about the Bro