ClearFoundation Tracker - ClearOS
View Issue Details
0015001ClearOSsnortpublic2017-05-20 11:152019-06-18 08:29
NickH 
 
normaltweakalways
closedsuspended 
7.3.1 
 
0015001: Snort restarts twice on logrotate
In /etc/logrotate.d/snort there are two sections, on to rotate /var/log/snort/syslog and one to rotate /var/log/snortsam. Each section restarts snort. This is silly. Both section should be combined into a single function by making the function:

/var/log/snort/syslog /var/log/snortsam {
    missingok
    postrotate
        /sbin/service snort condrestart >/dev/null 2>&1 || true
    endscript
}

This would slicken up the log rotation and save on some system resources.
Install and run snort and logrotate.
No tags attached.
Issue History
2017-05-20 11:15NickHNew Issue
2017-05-20 12:00NickHNote Added: 0005691
2017-05-23 22:12user2Statusnew => acknowledged
2019-06-18 08:28NickHNote Added: 0012201
2019-06-18 08:29NickHStatusacknowledged => closed
2019-06-18 08:29NickHResolutionopen => suspended

Notes
(0005691)
NickH   
2017-05-20 12:00   
Forgot to add "sharedscripts" between the missingok and postrotate lines.
(0012201)
NickH   
2019-06-18 08:28   
Migrated to https://gitlab.com/clearos/clearfoundation/snort/issues/3 [^]