Hi Arturo, >> This problem is fixed after applying the attached patch, which uses the >> 'copytruncate' option in logrotate instead of 'create'. IMHO this is the >> smallest impact fix for this issue, it might be worth looking at this in >> suricata itself to make the file handling consistent. >> > > Patch applied, thanks.
Many thanks for considering the patch. > Yes, the logfiles handling probably something to improve upstream. It > also affects running suricata under different user than root. I can take a look at the code to see if I can come up with a patch; otherwise I would be happy to have this forwarded to upstream. Cheers Sascha
signature.asc
Description: OpenPGP digital signature
