[Bro] Packet loss during log rotation

Damian Gerow damian.gerow at shopify.com
Wed Sep 24 10:49:39 PDT 2014


On Wed, Sep 24, 2014 at 1:35 PM, Seth Hall <seth at icir.org> wrote:

> > Beauty.  It does.  I was even able to run both configurations together
> for a while, to confirm that everything was working as expected.
>
> You aren't seeing the packet loss when files rotate anymore?  I think we
> still need to look into the rotation issue, I think that a few other people
> have seen similar effects.


Correct.  Granted, it's only been about three rotations with the cluster
configuration, but none of those rotations have resulted in packet loss,
whereas almost every rotation in 'standalone' does.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140924/99553dfd/attachment.html 


More information about the Bro mailing list