Recreating a U2 file

Chris Wolski <[email protected]>
Newsgroups gmane.comp.security.ids.snort.devel
Message-ID <CAOUK+FRSdQ9Eb3jbHdQMTMqvUY8_2EGcFG_pUmEA_6q6ZbxXfA@mail.gmail.com>
What is the best way to create a fresh unified2 file without restarting
snort?

My goal is to export the u2 files created by snort out to an external log
processor that is running barnyard2.  If I move the file, snort will not
create a new file unless I restart the snort instance.  I figure the best
way around this is to create a new u2 file with the same file name so that
snort continues plugging along.  This is necessary as a snort restart can
be timely depending on system load.

Thanks.

Chris

------------------------------------------------------------------------------
Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140

_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.