Snort mailing list archives

Re: Free Inodes


From: Jason <security () brvenik com>
Date: Wed, 08 Jun 2005 01:32:06 -0400



Dan Mahoney, System Admin wrote:
I know the whole "I'm running out of inodes" thing is in the FAQ.

What I don't understand is why a potentially large directory is put in what is one of the typically smallest directories.

I'm confused by this statement. Why wouldn't the logs be placed under /var/log?


How can I change this directory? Under FreeBSD I've tried a symlink from /usr/local/var/log/snort to /var/log/snort but it looks like that's blown away and replaced by a real directory at snort startup.

I'm less thrilled by the idea of moving all of /var/log under /usr to fix this.

Is there a config file I can tweak to handle this?

http://www.snort.org/docs/snort_htmanuals/htmanual_233/node10.html


Also, I figure I can clean out the directory with a periodic cron tab (every five minutes)

find / -atime +1h -delete

Will this break things?

no


-Dan

--

"A single death is a tragedy.  A million deaths is a statistic."

-Josef Stalin, As quoted on the cover to Savatage's "Dead Winter Dead"

--------Dan Mahoney--------
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Site:  http://www.gushi.org
---------------------------



-------------------------------------------------------
This SF.Net email is sponsored by: NEC IT Guy Games. How far can you shotput a projector? How fast can you ride your desk chair down the office luge track? If you want to score the big prize, get to know the little guy. Play to win an NEC 61" plasma display: http://www.necitguy.com/?r=20
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.Net email is sponsored by: NEC IT Guy Games.  How far can you shotput
a projector? How fast can you ride your desk chair down the office luge track?
If you want to score the big prize, get to know the little guy. Play to win an NEC 61" plasma display: http://www.necitguy.com/?r=20
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: