<font><font face="arial,helvetica,sans-serif">Just realize that yesterday, when I git clone, I actually git from <a href="http://git.bro-ids.org">git.bro-ids.org</a>, instead of the <a href="http://git.bro.org">git.bro.org</a>. Can that be the case?<br>
</font></font><br><div class="gmail_quote">On Thu, Aug 8, 2013 at 11:59 AM, Siwek, Jonathan Luke <span dir="ltr"><<a href="mailto:jsiwek@illinois.edu" target="_blank">jsiwek@illinois.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">> error in /usr/local/bro/share/bro/base/frameworks/files/./main.bro, line 317: unknown identifier Site::local_nets, at or near "Site::local_nets"<br>
<br>
</div>Maybe check if "local_nets" is actually defined in the version of base/utils/site.bro that you have (and that it's in the export section for module "Site"). If it's not, then you've got a modified/bad/old/wrong version of that script installed. You can also load policy/misc/loaded-scripts.bro, run bro, then check the loaded_scripts.log to see if you're actually loading the scripts from the location you expect.<br>
<br>
- Jon</blockquote></div><br><br clear="all"><br>-- <br>Hui Lin<div>PhD Candidate, Research Assistant<br>Electrical and Computer Engineering Department<br>University of Illinois at Urbana-Champaign</div>