[Snort-devel] bug in snort 1.8.6
scheidell at ...1197...
Thu May 2 11:00:03 EDT 2002
> That's a bug? Hmm, there's no data to read so we should exit. What do you
> recommend for a proper strategy here?
fyi, not that it should matter TOO much.. but external 'log rotate'
programs might not sighup snort to restart. (the built in logrotate on
FREEBSD comes to mind)
might be a good idea to incorporate some process, just in case someone
rotates logs, (ie, ftell() is now SMALLER than it was at last read)
SECNAP Network Security, LLC
(561) 368-9561 scheidell at ...1197...
More information about the Snort-devel