[Snort-users] rotating logs?

Erek Adams erek at ...577...
Mon Sep 23 14:03:02 EDT 2002

On Mon, 23 Sep 2002, /dev/null wrote:

> Thanks!  When it restarts, won't it just open the old log?  What would
> cause it to open a new log file?

The pcap files are have the date in Unix epoch format appened to the name.
Your alert and scan.log file would be opened in append mode, but your binary
log will be restarted.


Erek Adams

More information about the Snort-users mailing list