[Bro-Dev] #970: broctl stop/restart eating logs? (was: broctl restart eating logs?)
robin at icir.org
Mon Mar 25 10:39:40 PDT 2013
On Wed, Mar 20, 2013 at 19:41 -0000, you wrote:
> moved into tmp. At that point, if there are still any
> archive-log processes running in the background, they
> likely won't be able to archive their log file because
> the file has already been deleted by the post-terminate
yeah, you're right. it works as long as the post-processors have their
file already open because then the file system won't delete it until
they are done. But seems that can go wrong if the post-processor is a
script with multiple steps, like with the trace-summaries.
Any suggestion how to fix it and make this determistic?
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the bro-dev