[Bro] Odd log problem - logs get archived as empty

Jeremy Hoel jthoel at gmail.com
Thu Mar 6 16:11:09 PST 2014


#  broctl config | grep compress
compresscmd = gzip -9
compressextension = gz
compresslogs = 1


If the variables are blank, wouldn't, worst case, it copy the files in and
just have them be big?



On Fri, Mar 7, 2014 at 12:06 AM, Justin Azoff <JAzoff at albany.edu> wrote:

> On Thu, Mar 06, 2014 at 11:49:46PM +0000, Jeremy Hoel wrote:
> > We are running "bro version 2.2" compiled from source on CentOS 6.5.
> >
> > but when they get cycled out to the normal log archive they become empty
> blank
> > files.
>
> Run
>
>     broctl config | grep compress
>
> What are the variables set to?
>
> looks like your compresscmd and compressextension options are blank.
>
> --
> -- Justin Azoff
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140307/737e8f29/attachment.html 


More information about the Bro mailing list