[Bro-Dev] #970: broctl stop/restart eating logs?

Bro Tracker bro at tracker.bro.org
Mon Mar 25 10:41:37 PDT 2013


#970: broctl stop/restart eating logs?
-----------------------------+------------------------
  Reporter:  robin           |      Owner:
      Type:  Problem         |     Status:  new
  Priority:  High            |  Milestone:  Bro2.2
 Component:  Bro             |    Version:  git/master
Resolution:  Solved/Applied  |   Keywords:
-----------------------------+------------------------

Comment (by robin):

 On Wed, Mar 20, 2013 at 19:41 -0000, you wrote:

 >  moved into tmp. At that point, if there are still any
 >  archive-log processes running in the background, they
 >  likely won't be able to archive their log file because
 >  the file has already been deleted by the post-terminate
 >  script.

 yeah, you're right. it works as long as the post-processors have their
 file already open because then the file system won't delete it until
 they are done. But seems that can go wrong if the post-processor is a
 script with multiple steps, like with the trace-summaries.

 Any suggestion how to fix it and make this determistic?

 Robin

-- 
Ticket URL: <http://tracker.bro.org/bro/ticket/970#comment:4>
Bro Tracker <http://tracker.bro.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list