Recreating a U2 file

[Chris Wolski <chris () 360cybersec com>]

What is the best way to create a fresh unified2 file without restarting
snort?

My goal is to export the u2 files created by snort out to an external log
processor that is running barnyard2.  If I move the file, snort will not
create a new file unless I restart the snort instance.  I figure the best
way around this is to create a new u2 file with the same file name so that
snort continues plugging along.  This is necessary as a snort restart can
be timely depending on system load.

Thanks.

Chris

------------------------------------------------------------------------------
Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!