Honeypots: Re: honeyall logs reset

[james.deese () gmail com]

If you want to do it the manual way, your log files are most likely stored in /var/log.  I don't think there is an 
option for doing this within the honeywall menu, you will need to go to the command line.

For example, to get rid of all pcap data you can "rm -rf /var/log/pcap/*".  You will need to stop tcpdump before doing 
this or delete all of the files within the pcap folder except for the latest file because tcpdump is still writing to 
it.  Other log files are stored the same way.  Some may be within a Mysql database that you will need to reset but its 
all up to how you have your honeywall configured.