Re: session.log

[sekure <sekure () gmail com>]

is session.log where you are writing stream4 stats?  In that case I am
surprised it's so small. :)  Mine grows at a rate of about 5MB/hour...

Anyway, to answer your question, you have to HUP snort to get it to
write to the new file.  That's the only way, otherwise it keeps
writing to the old filehandle, which no longer exists.  Even creating
a new file will not help until you kill -HUP snort


On Wed, 6 Oct 2004 17:49:46 -0500, Chris <cpollock () earthlink net> wrote:
> My /var/log/session.log has grown to over 5mb so I setup logrotate to
> compress the log daily.  Problem is a new one hasn't been created since
> about 4am this morning.  Is there another way to prevent the log growing so
> large?  If I have logrotate create a session.log file after compressing,
> will that work correctly?
>
> --
> Chris
> Registered Linux User 283774 http://counter.li.org
> 5:41pm up 3 days, 1:33, 1 user, load average: 0.25, 0.27, 0.33
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Those parts of the system that you can hit with a hammer (not advised)
> are called hardware; those program instructions that you can only curse
> at are called software.
>                -- Levitating Trains and Kamikaze Genes: Technological
>                   Literacy for the 1990's.
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
> -------------------------------------------------------
> This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
> Use IT products in your business? Tell us what you think of them. Give us
> Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
> http://productguide.itmanagersjournal.com/guidepromo.tmpl
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?listsnort-users


-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users