Snort mailing list archives
Re: -l parameter
From: twig les <twigles () yahoo com>
Date: Tue, 9 Dec 2003 16:43:26 -0800 (PST)
I'm executing these commands in
crontab: 3 16 * * * find /var/log/snort -atime +7 -exec rm -rf {} \; 4 16 * * * mkdir /var/log/snort The mkdir was necessary because "rm -rf" removes the snort directory. Is it possible to avoid this? Thanks again for the advice from both of you.
Well you could erase things *inside* the directory, which it looks like that command does. I'd have to tinker with it, no time. But as an alternative have you tried newsyslog (man 8 newsyslog)? If you don't get into the ISO 8601 time formatting garbage it should take you about 5 minutes to set up log rotation. If you get into the ISO 8601 hooha it should take 10. __________________________________ Do you Yahoo!? Protect your identity with Yahoo! Mail AddressGuard http://antispam.yahoo.com/whatsnewfree ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- -l parameter adam_peterson (Dec 08)
- Re: -l parameter Dirk Geschke (Dec 08)
- Re: -l parameter Chris Keladis (Dec 08)
- RE: -l parameter Ed Callahan (Dec 09)
- <Possible follow-ups>
- Re: -l parameter adam_peterson (Dec 08)
- RE: -l parameter Michael Steele (Dec 08)
- Re: -l parameter adam_peterson (Dec 09)
- Re: -l parameter John Creegan (Dec 09)
- Re: -l parameter adam_peterson (Dec 09)
- Re: -l parameter twig les (Dec 09)
- RE: -l parameter Ed Callahan (Dec 09)
- Re: -l parameter Dirk Geschke (Dec 10)
- RE: -l parameter Antonio Costa (Dec 10)
- Re: -l parameter Dirk Geschke (Dec 08)