[Bro-Dev] [Bro-Commits] [git/broctl] topic/dnthayer/cleanup2: Ignore stdout.log and stderr.log in post-terminate (a2a3b0d)
Aashish Sharma
asharma at lbl.gov
Thu Mar 21 12:20:14 PDT 2013
> We want them archived only when a crash is detected, right?
Crash - certainly yes.
Other times - No strong opinion. Would be nice to, if possible. We archive reporter.log, communication.log - these also don't quite carry processed 'IDS' data. Might as well archive these two.
Aashish
On Thu, Mar 21, 2013 at 01:38:50PM -0500, Daniel Thayer wrote:
> On 03/21/2013 01:33 PM, Robin Sommer wrote:
> >
>
> > Yeah, that's the point: there may be useful information in there even
> > during normal operation (i.e., when there's no crash report).
> >
> > Robin
> >
>
> Not sure what you mean. During normal log rotation,
> stdout.log/stderr.log are not archived. They are also
> not archived during "broctl stop" (assuming no crashes).
> We want them archived only when a crash is detected, right?
>
> _______________________________________________
> bro-dev mailing list
> bro-dev at bro.org
> http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
--
Aashish Sharma (asharma at lbl.gov)
Cyber Security, Information Technology Division
Lawrence Berkeley National Laboratory
http://www.lbl.gov/cyber/pgp-aashish.txt
Office: (510)-495-2680 Cell: (510)-457-1525
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20130321/227633e6/attachment.bin
More information about the bro-dev
mailing list