[Bro] Re: Bro Packet Trace Dumps.

[Robin Sommer]

On Wed, Mar 30, 2005 at 14:24 -0600, aashish at uiuc.edu wrote:

> Is it possible to set up bro to define the size at which bulk trace file should roll over 
> and not have any other log files roll over (even if the bulk trace files roll over at 2G) ? 

Not right now. You can have the bulk trace file rolled over by setting
log_max_size and adding its filename to RotateLogs::aux_files (see
rotate-logs.bro). But then log_max_size affects all log files for which no
explicit size has been defined with &rotate_size.

Robin

-- 
Robin Sommer * Room        01.08.055 * www.net.in.tum.de
TU Muenchen  * Phone (089) 289-18006 *  sommer at in.tum.de