[Snort-users] Free Inodes

Jason security at ...5028...
Tue Jun 7 22:33:11 EDT 2005


Dan Mahoney, System Admin wrote:
> I know the whole "I'm running out of inodes" thing is in the FAQ.
> 
> What I don't understand is why a potentially large directory is put in 
> what is one of the typically smallest directories.

I'm confused by this statement. Why wouldn't the logs be placed under 
/var/log?

> 
> How can I change this directory?  Under FreeBSD I've tried a symlink 
> from /usr/local/var/log/snort to /var/log/snort but it looks like that's 
> blown away and replaced by a real directory at snort startup.
> 
> I'm less thrilled by the idea of moving all of /var/log under /usr to 
> fix this.
> 
> Is there a config file I can tweak to handle this?

http://www.snort.org/docs/snort_htmanuals/htmanual_233/node10.html

> 
> Also, I figure I can clean out the directory with a periodic cron tab 
> (every five minutes)
> 
> find / -atime +1h -delete
> 
> Will this break things?

no

> 
> -Dan
> 
> -- 
> 
> "A single death is a tragedy.  A million deaths is a statistic."
> 
> -Josef Stalin, As quoted on the cover to Savatage's "Dead Winter Dead"
> 
> --------Dan Mahoney--------
> Techie,  Sysadmin,  WebGeek
> Gushi on efnet/undernet IRC
> ICQ: 13735144   AIM: LarpGM
> Site:  http://www.gushi.org
> ---------------------------
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: NEC IT Guy Games.  How far can you 
> shotput
> a projector? How fast can you ride your desk chair down the office luge 
> track?
> If you want to score the big prize, get to know the little guy.  Play to 
> win an NEC 61" plasma display: http://www.necitguy.com/?r=20
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 




More information about the Snort-users mailing list