[Bro] log-append.bro

Robin Sommer robin at icir.org
Tue Sep 24 14:01:18 PDT 2013



On Mon, Sep 23, 2013 at 21:51 +0800, Po-Ching Lin wrote:

>   I would like to append the logs in the current run to existing logs.

Bro 2.x doesn't support that anymore as the logs no longer use the
open*() functions but go through the internal logging system. You
could work around it by definining a post-processor which takes the
log file and copies/appends it to somewhere else.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 *     robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 * www.icir.org/robin



More information about the Bro mailing list