[
https://bro-tracker.atlassian.net/browse/BIT-1126?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15400#comment-15400
]
Daniel Thayer commented on BIT-1126:
------------------------------------
Branch topic/dnthayer/ticket1126 has a fix for this.
> Logs disappearing after bro termination
> ---------------------------------------
>
> Key: BIT-1126
> URL: https://bro-tracker.atlassian.net/browse/BIT-1126
> Project: Bro Issue Tracker
> Issue Type: Problem
> Components: BroControl
> Affects Versions: 2.2
> Environment: freebsd
> Reporter: Aashish Sharma
> Priority: High
> Labels: BroControl, log
>
> I have noticed several times that in the event of bro termination after
> expiration of StopTimeout, bro logs disappear.
> This is generally seen when log sizes are much bigger (for example after
> overnight)
> This issue was present in bro-2.1 and continue to be present in bro-2.2
> I see (kill from control.py - kick in often when stopping or restarting bro)
> because catch-n-release is still trying to flush its tables (which takes long
> time). Then there is no logs from overnight!
> I can provide more information if desired (or even a test case).
> Thanks,
> Aashish
>
--
This message was sent by Atlassian JIRA
(v6.2-OD-08-034#6251)
_______________________________________________
bro-dev mailing list
bro-dev@bro.org
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
