Norwegian Honeynet Project


A chapter of the Honeynet Project

Daemonlogger 1.1

August 7th, 2008 by Tor Inge Skaar (0) Tools

Marty just released version 1.1 of daemonlogger. In addition to a small bug fix, it now includes the missing functionality I wrote about in the previous post; ring buffer activation based on disk utilization. The new option -M takes a percentage value as argument. The value specify the percentage of disk utilization you want before the ring buffer gets activated. Here is an example where old log files are deleted when there is only 2% of free space left:

daemonlogger -i eth0 -d -l /var/log/pcap -S 0 -t 1h -M 98 -r

Get it at: http://www.snort.org/users/roesch/code/daemonlogger-1.1.0.tar.gz

Leave a Reply