/var/log/snort
 

Hello,

This is probably a very simple question for someone to answer: (but I haven't got a clue, hence my posting here!)

Having partitioned my HD when installing Mandrake 8.1, I suddenly find that I've made some bad choices and there is very little space left in /var/log (450Mb to be precise.)

This box is to be used as an IDS and I would like if possible to grab some space from another partition (/home for example which is 2.5Gb) and use some of this as /var/log/snort. (Like a symlink to this space - is this correct?)

Sooo... can anyone tell me how to do this? I don't really want to repartition the HD unless absolutely necessary (too much work - it took me long enough to get Snort running properly!)

Thanks in advance for any responses!

Mark.

Yeah, I've done this with logs before... but not permanently. I guess it would work forever.

mv /var/log/snort /var/log/oldsnort (can't have two identically named things at once or snort may go kazoo)
ln -s /home/bob/snortlog /var/log/snort

That should work...

Cheers,

Finegan

If your data is backed up you can alternatively try ext2resize
http://ext2resize.sourceforge.net/
or gnu parted
http://www.gnu.org/software/parted/

There is also LVM at http://www.sistina.com/products_lvm.htm

Parted

I had to do something similar to this not too long ago (merging my LFS building partition with /usr). I'm fairly certain that it can relocate partitions without data loss but I don't know the exact procedure. Be sure to read all the docs and write down the partition info before doing anything.