[Bro-Dev] [Bro-Commits] [git/broctl] topic/dnthayer/cleanup2: Ignore stdout.log and stderr.log in post-terminate (a2a3b0d)

Aashish Sharma asharma at lbl.gov
Thu Mar 21 12:20:14 PDT 2013


> We want them archived only when a crash is detected, right?

Crash - certainly yes. 

Other times - No strong opinion. Would be nice to, if possible. We archive reporter.log, communication.log - these also don't quite carry processed 'IDS' data. Might as well archive these two. 

Aashish 

On Thu, Mar 21, 2013 at 01:38:50PM -0500, Daniel Thayer wrote:
> On 03/21/2013 01:33 PM, Robin Sommer wrote:
> >
> 
> > Yeah, that's the point: there may be useful information in there even
> > during normal operation (i.e., when there's no crash report).
> >
> > Robin
> >
> 
> Not sure what you mean.  During normal log rotation, 
> stdout.log/stderr.log are not archived.  They are also
> not archived during "broctl stop" (assuming no crashes).
> We want them archived only when a crash is detected, right?
> 
> _______________________________________________
> bro-dev mailing list
> bro-dev at bro.org
> http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev

-- 
Aashish Sharma	(asharma at lbl.gov) 				 
Cyber Security, Information Technology Division  
Lawrence Berkeley National Laboratory  
http://www.lbl.gov/cyber/pgp-aashish.txt 
Office: (510)-495-2680  Cell: (510)-457-1525
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20130321/227633e6/attachment.bin 


More information about the bro-dev mailing list