Re: honeyall logs reset

[email protected] 28 Feb 2006 16:35:17 -0000
Newsgroups gmane.comp.security.honeypots
Message-ID <[email protected]>
If you want to do it the manual way, your log files are most likely store=
d in /var/log.  I don't think there is an option for doing this within th=
e honeywall menu, you will need to go to the command line.

For example, to get rid of all pcap data you can "rm -rf /var/log/pcap/*"=
.  You will need to stop tcpdump before doing this or delete all of the f=
iles within the pcap folder except for the latest file because tcpdump is=
 still writing to it.  Other log files are stored the same way.  Some may=
 be within a Mysql database that you will need to reset but its all up to=
 how you have your honeywall configured.=20