[Bro-Dev] [JIRA] (BIT-1126) Logs disappearing after bro termination

Robin Sommer (JIRA) jira at bro-tracker.atlassian.net
Thu Feb 6 20:55:39 PST 2014


     [ https://bro-tracker.atlassian.net/browse/BIT-1126?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robin Sommer updated BIT-1126:
------------------------------

    Resolution: Merged  (was: Fixed)
        Status: Closed  (was: Merge Request)

> Logs disappearing after bro termination
> ---------------------------------------
>
>                 Key: BIT-1126
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1126
>             Project: Bro Issue Tracker
>          Issue Type: Problem
>          Components: BroControl
>    Affects Versions: 2.2
>         Environment: freebsd 
>            Reporter: Aashish Sharma
>            Priority: High
>              Labels: BroControl, log
>
> I have noticed several times that in the event of bro termination after  expiration of StopTimeout, bro logs disappear. 
> This is generally seen when log sizes are much bigger (for example after overnight)
> This issue was present in bro-2.1 and continue to be present in bro-2.2 
> I see (kill from control.py - kick in often when stopping or restarting bro) because catch-n-release is still trying to flush its tables (which takes long time). Then there is no logs from overnight!
> I can provide more information if desired (or even a test case). 
> Thanks, 
> Aashish 
>  



--
This message was sent by Atlassian JIRA
(v6.2-OD-08-034#6251)


More information about the bro-dev mailing list