[Bro] Append instead of overwrite

Seth Hall seth at icir.org
Fri Aug 15 11:13:39 PDT 2014


On Aug 15, 2014, at 11:53 AM, James Lay <jlay at slave-tothe-box.net> wrote:

> To give me an option to append instead of overwrite.  I imagine that 
> since broctl does all the file management that this could be a command 
> line option...

Ah!  You just want to have file management (and perhaps full rotation?) added as a standalone script and not something that is added by broctl?

Johanna is right that with our current logging scheme we can't really append log files for multiple reasons but I could certainly pull together something that would give you decent log rotation without running broctl.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140815/2588f89f/attachment.bin 


More information about the Bro mailing list