[Bro-Dev] #970: broctl stop/restart eating logs? (was: broctl restart eating logs?)

Robin Sommer robin at icir.org
Mon Mar 25 10:39:40 PDT 2013



On Wed, Mar 20, 2013 at 19:41 -0000, you wrote:

>  moved into tmp. At that point, if there are still any
>  archive-log processes running in the background, they
>  likely won't be able to archive their log file because
>  the file has already been deleted by the post-terminate
>  script.

yeah, you're right. it works as long as the post-processors have their
file already open because then the file system won't delete it until
they are done. But seems that can go wrong if the post-processor is a
script with multiple steps, like with the trace-summaries. 

Any suggestion how to fix it and make this determistic?

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org


More information about the bro-dev mailing list