[Bro] Bro stops logging to sqlite

Leonardo Mokarzel Falcon leonardo.mokarzel.falcon at gmail.com
Sat Jan 14 14:00:55 PST 2017


Hi Bro community,

Currently I have configured my Bro instance to send DNS logs to the sqlite database: /ust/local/bro/logs/current/dns.sqlite.I'm then reading these logs from a Python script and deleting the lines which were read. I'm facing the issue that Bro stops logging to the same sqlite file if the lines are deleted by my Python program.

Has someone faced similar issues in the past?

Thanks!

Kind regards,

Leonardo Mokarzel Falcon
@LMokarzel


More information about the Bro mailing list