[Bro] What am I doing wrong here?

Brian Tierney bltierney at lbl.gov
Wed Nov 29 10:24:33 PST 2006

Did you do a 'make install-brolite'? If so, it looks like the bro user
account did not get created correctly. Check your /etc/passwd for a bro
user id, and make sure the home directory is correct (/usr/local/bro)

David Caldwell wrote:
> Okay, I now have bro installed. Things appear to be in the right  
> place. I must have missed something in the docs to get this working,  
> and I am sure that it does not help that I am not exactly familiar  
> with Debian. bear with me here as I stumble my way through a new OS  
> and Bro. I expect I am going to ask alot of stupid questions, but I  
> am documenting everything so that it may be used later to update or  
> possibly improve the documentation or help someone else who is in the  
> same boat I am.
> Here is what I get when I try to start Bro from the command line:
> jyd:/etc/rc3.d# /etc/init.d/bro.rc start
> bro.rc: Running as non-root user bro
> No directory, logging in with HOME=/
> bro.rc: Starting ..........bro.rc: Failed to start Bro
> /usr/local/bro/bin/bro: problem with interface eth1 - pcap_open_live:  
> socket: Operation not permitted
> here are the outputs in the logs files in /usr/local/bro/logs:
> /usr/local/bro/bin/bro: problem with interface eth1 - pcap_open_live:  
> socket: Operation not permitted
> Am I missing a permission issue here or what? Do I need to make some  
> changes in a config file that I missed?
> David Caldwell
> Colsa-HMT
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

  Brian L. Tierney,   Lawrence Berkeley National Laboratory (LBNL)
  1 Cyclotron Rd.  MS: 50B-2239,  Berkeley, CA  94720
  tel: 510-486-7381    fax: 510-495-2998   efax: 425-642-4558
  bltierney at lbl.gov   http://www-didc.lbl.gov/~tierney

More information about the Bro mailing list