[Bro] a odd problem
vern at icir.org
Fri Sep 17 07:56:59 PDT 2004
> I encounter a odd problem when i run *bro* today.
> # ./bro my -w /home/zw/bro09171617.dump
Flags need to come before policy scripts. It's interpreting "-w" and
"/home/zw/bro09171617.dump" as scripts to interpret. I would've expected
it to stop by saying "error: can't open -w" (that's what it does for me),
unless you happen to have a file "-w" in your Bro searchpath. Do you
have such a file? Can you send me the tcpdump trace file, so I can see
if I can reproduce this?
More information about the Bro