[Bro-Dev] [JIRA] (BIT-1126) Logs disappearing after bro termination

[Aashish Sharma (JIRA)]

Aashish Sharma created BIT-1126:
-----------------------------------

             Summary: Logs disappearing after bro termination
                 Key: BIT-1126
                 URL: https://bro-tracker.atlassian.net/browse/BIT-1126
             Project: Bro Issue Tracker
          Issue Type: Problem
          Components: BroControl
    Affects Versions: 2.2
         Environment: freebsd 
            Reporter: Aashish Sharma
            Priority: High


I have noticed several times that in the event of bro termination after  expiration of StopTimeout, bro logs disappear. 

This is generally seen when log sizes are much bigger (for example after overnight)

This issue was present in bro-2.1 and continue to be present in bro-2.2 

I see (kill from control.py - kick in often when stopping or restarting bro) because catch-n-release is still trying to flush its tables (which takes long time). Then there is no logs from overnight!

I can provide more information if desired (or even a test case). 

Thanks, 
Aashish 
 



--
This message was sent by Atlassian JIRA
(v6.2-OD-07-028#6211)