[Bro] no reports generated

[Jean-Philippe Luiggi]

Hello Jacob,

I think we've forgotten (in fact myself <g>) something with the process
because it works for me.

Just do the following thing :

cd <source_path>/bro-1.2.1/scripts/perl
perl Makefile.PL
make
make install

I think it's the solution or something which is close (we may have to tweak
the perl's conf) but if i remember successfully, it was correct.

Best regards.

On Wed, Jan 31, 2007 at 07:50:30PM -0600, Jacob Yocom-Piatt wrote:
> bro-1.2.1 is now running on a 4.0-release openbsd machine here (thx j-p!) and
> generating logs, however i got an empty report email this morning. i mean empty
> as in there was no body to the email i received.
> 
> when i installed bro, i had to manually add the bro user and change ownership of
> some of the directories in its install directory:
> 
> # ls -al /usr/local/bro                                                        
>                                                                                
>                                                 
> total 68
> drwxr-xr-x  15 root  wheel   512 Jan 30 20:05 .
> drwxr-xr-x  15 root  wheel   512 Jan 30 19:52 ..
> drwxr-xr-x   2 bro   wheel   512 Jan 30 19:52 archive
> drwxr-xr-x   2 root  wheel   512 Jan 30 20:02 bin
> drwxr-xr-x   2 root  wheel   512 Jan 30 20:10 etc
> drwxr-xr-x   2 root  wheel   512 Jan 30 20:00 include
> drwxr-xr-x   2 root  wheel   512 Jan 30 20:00 lib
> drwxr-xr-x   3 bro   wheel  3584 Jan 31 03:00 logs
> drwxr-xr-x   4 root  wheel   512 Jan 30 20:05 perl
> drwxr-xr-x   3 root  wheel  4096 Jan 30 20:05 policy
> drwxr-xr-x   2 bro   wheel   512 Jan 30 19:52 reports
> drwxr-xr-x   2 root  wheel   512 Jan 30 20:05 scripts
> drwxr-xr-x   4 root  wheel   512 Jan 30 19:52 share
> drwxr-xr-x   2 root  wheel   512 Jan 30 20:05 site
> drwxr-xr-x   2 bro   wheel   512 Jan 30 21:07 var
> 
> perhaps this has something to do with the empty report? i've looked through the
> system logs and cannot find anything indicating why the report was not generated.
> 
> cluesticking appreciated.
> 
> cheers,
> jake
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro