[Bro] Install issue - Bro cluster

Blake Mattern mattern at caltech.edu
Thu Feb 10 12:36:52 PST 2011


Mike,

 Yes, this is a Linux setup  RHEL 5.5 - and the user is root (not the safest but it will work for the test purpose).

Thanks

 =-=Blake

On Thu, Feb 10, 2011 at 03:21:34PM -0500, Mike Waite wrote:
> Blake,
> 
> Are running this on a linux machine and are you running broctl as root?  
> 
> In my install I would get this error if /sbin was not in my path.
> 
> Michael Waite
> Enterprise Security Analyst
> Enterprise Information Privacy and Security Services (EIPSs)
> Security Operations and Services (SOS)
> Information Technology Services (ITS)
> The Pennsylvania State University (PSU)
> 
> Direct Telephone:  814-865-2297
> ITS-SOS Telephone: 814-863-9533
> ITS-SOS E-Mail: security at psu.edu
> 
> On 02/10/2011 03:12 PM, Blake Mattern wrote:
> > Thanks for the info,
> >  
> >  I did as you said, and the recompile and install went well.
> > (no errors) But now I seem to get an error when trying to start /usr/loca/bro/bin/./broctl
> > 
> > # ./broctl 
> > error: script must be run on manager node
> > 
> > 
> > here is what the node.cfg looks like:
> > 
> > manager]
> > type=manager
> > host=is-bro1.is
> > 
> > [proxy-1]
> > type=proxy
> > host=is-bro1.is
> > 
> > [worker-1]
> > type=worker
> > host=is-bro2.is
> > interface=eth2
> > 
> > [worker-2]
> > type=worker
> > host=is-bro3.is
> > interface=eth2
> > 
> > 
> > Thanks,
> > 
> >  =-=Blake
> > 
> > On Thu, Feb 10, 2011 at 10:42:50AM -0600, Dop wrote:
> >> Blake,
> >>
> >> Do you have an existing Bro installation at your target install location?
> >> I think I ran into this when I had 1.5.1 installation and tried to put
> >> 1.5.2 on top of it.  If you can't remove the existing install I'd try
> >> creating/editing your etc/node.cfg and setting the current system as the
> >> manager.
> >>
> >> Then next thing you'll want to do is edit
> >> share/bro/broctl/cluster-addrs.hot.bro and comment out line 3 (the only
> >> line).
> >>
> >> -Dop
> >>
> >> -----Original Message-----
> >> From: Blake Mattern <mattern at caltech.edu>
> >> Date: Wed, 9 Feb 2011 15:38:32 -0800
> >> To: <Bro at bro-ids.org>
> >> Subject: [Bro] Install issue - Bro cluster
> >>
> >>> Greetings all,
> >>>
> >>> I'm having an issue with the install of Bro via cluster mode. I receive
> >>> this error when I run make install-broctl:
> >>>
> >>> ( cd aux/broctl && make install-broctl )
> >>> make[1]: Entering directory `/home/bro1/bro/bro-1.5.2/aux/broctl'
> >>> MAKE_DESTDIR= ./bin/make-wrapper install --make
> >>> error: script must be run on manager node
> >>> make[1]: *** [install-broctl] Error 1
> >>> make[1]: Leaving directory `/home/bro1/bro/bro-1.5.2/aux/broctl'
> >>> make: *** [install-broctl] Error 2
> >>>
> >>> This is on the machine I will use as the Managing / Proxy. I also have 2
> >>> other machines set as workers (they installed fine - No issues)
> >>>
> >>> Any ideas?
> >>>
> >>> Thanks,
> >>>
> >>> =-=Blake
> >>>
> >>> -- 
> >>> Blake Mattern
> >>> Information Security
> >>> California Institute of Technology
> >>> 626-395-3512
> >>> mattern at caltech.edu
> >>> _______________________________________________
> >>> Bro mailing list
> >>> bro at bro-ids.org
> >>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> >>>
> >>
> >>
> > 
> 



> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro


-- 
Blake Mattern
Information Security
California Institute of Technology
626-395-3512
mattern at caltech.edu



More information about the Bro mailing list