[Snort-users] tail

GMX Dumpmail Dumpmail at ...158...
Thu Jul 27 16:01:40 EDT 2000


Hello Patrick,

Thursday, July 27, 2000, 9:50:40 PM, you wrote:

>> Hi i like color logs but this only processes complete logs and then
>> ends. I want to use it like tail ti put the new added live to
>> /dev/tty12 like tail!
>> Please help!

MP> Dunno why this went to the list, but I feel the need to head
MP> off bad marketing.  ACL does the above, the same way tail
MP> does.  Granted, it doesn't do `tail`ing itself, but in the
MP> spirit of Unix

MP> tail -f logfile | acl > /dev/tty12

MP> works just fine.  Of course, the better way to do it is
MP> to do a named pipe using `mkfifo`

MP> acl < /dev/logdata > /dev/tty12

MP> BTW, beware of old syslogds that would stop logging if
MP> data was sent to a named pipe that wasn't read from.  I
MP> found this out the hard way.

MP> Sorry for the wasted slots.


MP> ~Patrick

MP> _______________________________________________
MP> Snort-users mailing list
MP> Snort-users at lists.sourceforge.net
MP> http://lists.sourceforge.net/mailman/listinfo/snort-users


Ok thanks, it works now, but i still have the "4 packet display
problem" :(

Best regards,
 Thomas                            mailto:Dumpmail at ...158...






More information about the Snort-users mailing list