[Bro] LogExpireInterval not respected?

[Seth Hall]

On Feb 12, 2013, at 12:18 PM, Jesse Bowling <jessebowling at gmail.com> wrote:

> Unfortunately, that was not the case here (although I have observed the same previously). Disabling the cron job and running it manually with strace, we end up hanging after a few minutes:

I've typically seen this when the stats.log file grows too large.  Try deleting or moving <prefix>/spool/stats.log and then do a full install/restart in broctl.  

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/