[Bro] Time Machine

[Stephen Lau]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Vern Paxson wrote:
>> I am working with the time machine and I getting logs (tm.log) but I
> am
>> not seeing IP data being written to the disk.
> 
> For how long have you run, and over what volume of traffic?  It can take
> a while for the first files to appear (many minutes at LBL), due to the
> Time Machine's efficiency at trimming down the traffic stream.
> 
> 		Vern
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> 

Vern,

Hi from the other side of the Bay.

It's definitely seeing traffic. I was thinking along the same
lines that it just hasn't flushed it buffers. I sent it a
SIGHUP hoping it would terminate and flush but the logs were still
zero.

The link we're monitoring does not have very much traffic on
it.

Steve

- --
+---------------------------------------------------------------------
Stephen Lau - Stephen.Lau at ucsf.edu
Information Security Policy and Program Manager
University of California, San Francisco
1855 Folsom, Suite 602, Box 0707, San Francisco, CA 94134
+1(415) 476-3106 (Work) +1(415) 476-0479 (Fax)
PGP: 44C8 C9CB C15E 2AE1 7B0A 544E 9A04 AB2B F63F 748B
+---------------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (MingW32)

iD8DBQFEd4QNmgSrK/Y/dIsRAqwPAKDMH0g/cadu3i5SDE5G9oEltHp5kQCgqKtC
4H+vT1P7mqwLVl0drzBhh14=
=8Vyu
-----END PGP SIGNATURE-----