[Bro] Extracted files don't rotate
James Lay
jlay at slave-tothe-box.net
Thu Feb 9 05:09:48 PST 2017
On Wed, 2017-02-08 at 22:15 -0500, Seth Hall wrote:
> >
> > On Feb 8, 2017, at 5:17 PM, James Lay <jlay at slave-tothe-box.net>
> > wrote:
> >
> > Thanks Justin that's helpful. So as I look at my old setup I see
> > that I
> > indeed had move and compress manually on a cron job, so I'll just
> > do
> > that for the extract_files dir. Maybe a feature request down the
> > road
> > would be (maybe in broctl.conf) to be able to add "pre" rotate and
> > "post" rotate scripts. Just a thought.
> This has been a bit of a sticking point for quite a while. Part of
> the issue is the diversity in how clusters are run and managed. It's
> hard to create one solution which works for everyone's deployment.
>
> I've been hoping to spend some time rejiggering how file extraction
> happens a little bit this year but I'd be glad to see anyone else
> beat me to it. It's a deceptively sneaky issue.
>
> .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/
Appreciate the feedback all.
James
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170209/fec0b557/attachment.html
More information about the Bro
mailing list