[Bro] error: script must be run on manager node

Tyler Schoenke Tyler.Schoenke at colorado.edu
Tue Feb 16 13:41:42 PST 2010

I just installed Bro on Linux, CentOS 5.3 x86_64, and am getting this
error message when Bro tries to restart from cron.  I can start Bro fine
from the command line.  Any ideas?

Subject: Cron <root at xxxxxxxx> /usr/local/bro/bin/broctl cron
Content-Type: text/plain; charset=UTF-8
Auto-Submitted: auto-generated
X-Cron-Env: <SHELL=/bin/sh>
X-Cron-Env: <HOME=/root>
X-Cron-Env: <PATH=/usr/bin:/bin>
X-Cron-Env: <LOGNAME=root>
X-Cron-Env: <USER=root>

error: script must be run on manager node

Previously, I was getting this error when trying to start the cluster
via the command line, but I fixed it by renaming the host from the FQDN
to just the hostname without the domain extension.

On a sidenote, I switched from using the BPF filer within Bro to using
Click! to distribute the traffic, and the eight workers are now showing
a 6-12% drop rate down from 40-50% drop rate.


Tyler Schoenke
Network Security Analyst
IT Security Office
University of Colorado - Boulder

More information about the Bro mailing list