Re: daemonlogger buggy?

["Marty Roesch (maroesch)" <maroesch () cisco com>]

Hi Bradley,

You should be able to just set a max file count and put it in ringbuffer
mode.  The default rollover size is 1GB so it’s not necessary to specify a
size.

daemonlogger -d -i p5p4 -l /var/log/daemonlogger/p5p4 -n daemonlogger-p5p4
-p daemonlogger-p5p4.pid -r -m 20


Try that and let me know if it still doesn’t do what you want...

-- 
Martin Roesch - maroesch () cisco com
VP/Chief Architect, Security Business Group
   ,,_
  o"  )~  Sourcefire ­ Now a part of Cisco   . : | : . : | : .
   ''''






On 7/22/15, 2:21 PM, "Turnbough, Bradley E." <bturnbough () belcan com> wrote:

> Running with these opts:
>
> /opt/daemonlogger/daemonlogger -d -i p5p4 -l /var/log/daemonlogger/p5p4
> -m 10 -n daemonlogger-p5p4 -p daemonlogger-p5p4.pid -r -s 1000000000
>
> Right now, I have 156 files in the directory.  Every single one is ~ 1
> gig (except for the one it's currently writing to)
>
> What I'm looking to do is this:
>
> I want 1 gig files.
>
> I want a MAXIMUM of 20 files.
>
> 1gb x 20 files = 20gb used.
>
> What am I doing wrong here?
>
>
> _____________________________________________________________ This e-mail
> transmission contains information that is confidential and may be
> privileged. It is intended only for the addressee(s) named above. If you
> receive this e-mail in error, please do not read, copy or disseminate it
> in any manner. If you are not the intended recipient, any disclosure,
> copying, distribution or use of the contents of this information is
> prohibited. Please reply to the message immediately by informing the
> sender that the message was misdirected. After replying, please erase it
> from your computer system. Your assistance in correcting this error is
> appreciated.
>
> --------------------------------------------------------------------------
> ----
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!

------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!