[Bro-Dev] #780: file extraction trunctation.
Bro Tracker
bro at tracker.bro-ids.org
Thu May 3 11:37:55 PDT 2012
#780: file extraction trunctation.
----------------------+---------------------------------------
Reporter: justin | Owner:
Type: Problem | Status: new
Priority: High | Milestone: Bro2.1
Component: Bro | Version: git/master
Resolution: | Keywords: file extraction truncated
----------------------+---------------------------------------
Comment (by jsiwek):
In [bbac44a6a4b234405a5335dfe8c8ea2beef3f8d6/bro]:
{{{
#!CommitTicketReference repository="bro"
revision="bbac44a6a4b234405a5335dfe8c8ea2beef3f8d6"
Changes to open-file caching limits and uncached file unserialization.
- Unserializing files that were previously kicked out of the open-file
cache would cause them to be fopen'd with the original access
permissions which is usually 'w' and causes truncation. They
are now opened in 'a' mode. (addresses #780)
- Add 'max_files_in_cache' script option to manually set the maximum
amount of opened files to keep cached. Mainly this just helped
to create a simple test case for the above change.
- Remove unused NO_HAVE_SETRLIMIT preprocessor switch.
- On systems that don't enforce a limit on number of files opened for
the process, raise default max size of open-file cache from
32 to 512.
}}}
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/780#comment:3>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list