[Bro] Append instead of overwrite

James Lay jlay at slave-tothe-box.net
Fri Aug 15 11:24:18 PDT 2014


On 2014-08-15 12:13, Seth Hall wrote:
> On Aug 15, 2014, at 11:53 AM, James Lay <jlay at slave-tothe-box.net> 
> wrote:
>
>> To give me an option to append instead of overwrite.  I imagine that
>> since broctl does all the file management that this could be a 
>> command
>> line option...
>
> Ah!  You just want to have file management (and perhaps full
> rotation?) added as a standalone script and not something that is
> added by broctl?
>
> Johanna is right that with our current logging scheme we can't really
> append log files for multiple reasons but I could certainly pull
> together something that would give you decent log rotation without
> running broctl.
>
>   .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/

Seth, that would absolutely rock!

James



More information about the Bro mailing list