[Snort-devel] bug in snort 1.8.6

Michael Scheidell scheidell at ...1197...
Thu May 2 11:00:03 EDT 2002


> That's a bug?  Hmm, there's no data to read so we should exit.  What do you
> recommend for a proper strategy here?

fyi, not that it should matter TOO much.. but external 'log rotate'
programs might not sighup snort to restart. (the built in logrotate on
FREEBSD comes to mind)

might be a good idea to incorporate some process, just in case someone
rotates logs, (ie, ftell() is now SMALLER than it was at last read)

-- 
Michael Scheidell
SECNAP Network Security, LLC
(561) 368-9561 scheidell at ...1197...
http://www.secnap.net/





More information about the Snort-devel mailing list