[Bro-Dev] #970: broctl stop/restart eating logs?

Bro Tracker bro at tracker.bro.org
Mon Mar 25 11:01:52 PDT 2013


#970: broctl stop/restart eating logs?
-----------------------------+------------------------
  Reporter:  robin           |      Owner:
      Type:  Problem         |     Status:  new
  Priority:  High            |  Milestone:  Bro2.2
 Component:  Bro             |    Version:  git/master
Resolution:  Solved/Applied  |   Keywords:
-----------------------------+------------------------

Comment (by dnthayer):

 Replying to [comment:4 robin]:
 > On Wed, Mar 20, 2013 at 19:41 -0000, you wrote:
 >
 > >  moved into tmp. At that point, if there are still any
 > >  archive-log processes running in the background, they
 > >  likely won't be able to archive their log file because
 > >  the file has already been deleted by the post-terminate
 > >  script.
 >
 > yeah, you're right. it works as long as the post-processors have their
 > file already open because then the file system won't delete it until
 > they are done. But seems that can go wrong if the post-processor is a
 > script with multiple steps, like with the trace-summaries.
 >
 > Any suggestion how to fix it and make this determistic?
 >
 > Robin

 Yes, I have a fix that I need to test first.

-- 
Ticket URL: <http://tracker.bro.org/bro/ticket/970#comment:5>
Bro Tracker <http://tracker.bro.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list