Flush pcap and logs for new pcap import (AWS EC2 Import

[HBadger0017]

Version:
Amazon Cloud Image

Instance:
Standalone: Import
Type: t3a.xlarge
Storage: 256GB EBS (Optimized) gp3

I am using an Import version in AWS for analysis. For my project, I'm importing several, unrelated pcap files and I want to 'flush' the instance of the pcap and associated logs created from so-import-pcap.

What is the best/safest method to flush the system for new pcap? I don't have a lot of time to rebuild my AWS instances for each pcap or if I bork my instance.

Is there a so-import-pcap -flush <import.id> that safely automates this function?

[cm-ops]

You could try sudo so-nsm-clear before you import a new pcap.

[HBadger0017]

Will give that a go later today. Thanks.