[Bro-Dev] #780: file extraction trunctation.

Bro Tracker bro at tracker.bro-ids.org
Thu May 3 11:37:55 PDT 2012

#780: file extraction trunctation.
  Reporter:  justin   |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  High     |  Milestone:  Bro2.1
 Component:  Bro      |    Version:  git/master
Resolution:           |   Keywords:  file extraction truncated

Comment (by jsiwek):

 In [bbac44a6a4b234405a5335dfe8c8ea2beef3f8d6/bro]:
 #!CommitTicketReference repository="bro"
 Changes to open-file caching limits and uncached file unserialization.

 - Unserializing files that were previously kicked out of the open-file
   cache would cause them to be fopen'd with the original access
   permissions which is usually 'w' and causes truncation.  They
   are now opened in 'a' mode.  (addresses #780)

 - Add 'max_files_in_cache' script option to manually set the maximum
   amount of opened files to keep cached.  Mainly this just helped
   to create a simple test case for the above change.

 - Remove unused NO_HAVE_SETRLIMIT preprocessor switch.

 - On systems that don't enforce a limit on number of files opened for
   the process, raise default max size of open-file cache from
   32 to 512.

Ticket URL: <http://tracker.bro-ids.org/bro/ticket/780#comment:3>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker

More information about the bro-dev mailing list