[Bro] Log rotation and /dev/null with broctl

[Jim Mellander]

On Mon, Oct 18, 2010 at 11:05 AM, Matthias Vallentin <vallentin at icir.org>wrote:

> <snip>
>


>
> This is also weird:
>
>    % file /dev/null
>    /dev/null: ASCII text
>    % more /dev/null
>    title
>
> It almost seems that broctl overwrote /dev/null. Does that make any
> sense?
>
> seen this happen when redirection goes bad:

Instead of

rm my_file >/dev/null

the redirection is accidentally missed:

rm my_file /dev/null
(obviously only works with privs in /dev)

then the next process redirecting to  /dev/null creates a text file.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20101018/0192e7ad/attachment.html