<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1435248181715_3285" dir="ltr"><span id="yui_3_16_0_1_1435248181715_3310">So I upgraded to 2.0.8<br><br>It occurs to me I may not understand how profiling works. In the past the profiling files were created as soon as I started suricata. It seems now I am not seeing those files but it may be profiling. So my questions<br><br>When are the files created?<br>When are the files updated?</span></div><br> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_1_1435248181715_3265"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_1_1435248181715_3264"> <div dir="ltr" id="yui_3_16_0_1_1435248181715_3263"> <hr size="1" id="yui_3_16_0_1_1435248181715_3286"> <font size="2" face="Arial" id="yui_3_16_0_1_1435248181715_3354"> <b><span style="font-weight:bold;">From:</span></b> Victor Julien <lists@inliniac.net><br> <b><span style="font-weight: bold;">To:</span></b> oisf-users@lists.openinfosecfoundation.org <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, June 18, 2015 4:10 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [Oisf-users] Profiling on Suricata 2.04 NOT working<br> </font> </div> <div class="y_msg_container" id="yui_3_16_0_1_1435248181715_3356"><br>On 06/17/2015 03:08 PM, Charles DeVoe wrote:<div class="qtdSeparateBR"><br><br></div><div class="yqt2227912882" id="yqtfd24110"><br clear="none">> I for some reason am unable to get profiling to work on my sensors. Is<br clear="none">> there an issue in 2.04?<br clear="none">[...]<br clear="none">> Log directory (--localstatedir) : /usr/local/var/log/suricata/</div><br clear="none"><br clear="none">The profiling files should appear in your log directory, which is<br clear="none">/usr/local/var/log/suricata/ unless you changed it in your yaml.<br clear="none"><br clear="none">The first thing to do now is upgrade to 2.0.8 though. Many things were<br clear="none">fixed since 2.0.4.<br clear="none"><br clear="none">-- <br clear="none">---------------------------------------------<br clear="none">Victor Julien<br clear="none"><a shape="rect" href="http://www.inliniac.net/" target="_blank">http://www.inliniac.net/</a><br clear="none">PGP: <a shape="rect" href="http://www.inliniac.net/victorjulien.asc" target="_blank" id="yui_3_16_0_1_1435248181715_3357">http://www.inliniac.net/victorjulien.asc</a><br clear="none">---------------------------------------------<br clear="none"><br clear="none">_______________________________________________<br clear="none">Suricata IDS Users mailing list: <a shape="rect" ymailto="mailto:oisf-users@openinfosecfoundation.org" href="mailto:oisf-users@openinfosecfoundation.org" id="yui_3_16_0_1_1435248181715_3358">oisf-users@openinfosecfoundation.org</a><br clear="none">Site: <a shape="rect" href="http://suricata-ids.org/" target="_blank">http://suricata-ids.org </a>| Support: <a shape="rect" href="http://suricata-ids.org/support/" target="_blank">http://suricata-ids.org/support/</a><br clear="none">List: <a shape="rect" href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank" id="yui_3_16_0_1_1435248181715_3359">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br clear="none">Suricata User Conference November 4 & 5 in Barcelona: <a shape="rect" href="http://oisfevents.net/" target="_blank">http://oisfevents.net</a><div class="yqt2227912882" id="yqtfd68439"><br clear="none"></div><br><br></div> </div> </div> </div></body></html>