Re: [OpenCALEA] LEA collector

[Jesse Norell]

Maybe this could be configurable in the conf file?  Eg. something like:

[LEA_COLLECTOR]
capturefile_basedir  =  /var/lib/opencalea/{CaseID}/{IASP_ID}

Then you could do whichever you like.



On Fri, 2007-03-23 at 15:25 -0400, Manish Karir wrote:
> I agree with what you said.  The last format option is the
> best.  thought I would leave out the IASP_ID altogether.
> I assume there would be separate listeners for recveiving data
> from different IASP(on different ports perhaps).
> 
> -manish
> 
> 
> On Fri, 23 Mar 2007, Jesse Norell wrote:
> 
> > should be fine with the current design and an external vpn.  To be safe,
> > you could even put the pid in the filenames:
> >
> > /var/lib/opencalea/<caseID>/<IASP ID>/CmC-<timestamp>-<pid>.pcap
> > /var/lib/opencalea/<caseID>/<IASP ID>/CmII-<timestamp>-<pid>.txt
> >
-- 
Jesse Norell - jesse@kci.net
Kentec Communications, Inc.