[Bro] Fwd: problem installing bro on ubuntu 10.04

rajasekhar reddy orsr88 at gmail.com
Wed Jan 19 10:24:03 PST 2011

hi guys thanks for ur concern

i found some thing to wrk on bro ids..

can anyone tell me how to do these steps in configuring these steps in
configuration of bro ids


   The installation installs three configuration files which you should

      etc/broctl.cfg is the overall *BroControl* configuration. Initially,
      you probably only need to edit the email address for mails sent by the
      framework; that's the MailTo line.

      In etc/nodes.cfg, you need to specify the network interface Bro is to
      monitor; that's the interface line.

      In etc/networks.cfg, list all the networks which Bro should consider
      as local to the monitored enviroment.

thanks in advance


On Wed, Jan 19, 2011 at 3:27 PM, Seth Hall <seth at icir.org> wrote:

> On Jan 19, 2011, at 7:40 AM, rajasekhar reddy wrote:
> > hi when i tried to run bro ids i am getting this error did i done any
> mistake...
> >
> > root at ubuntu:/usr/local/bro/
> > etc# bro.rc start
> Apologies for the documentation being so out of date, but the bro.rc has
> not been included in the 1.5 release.  If you want to just Bro as a normal
> program, you can run the bro binary directly.  If you want to run it as a
> daemon watching live traffic you will likely want to run it with BroControl.
>  Here are some docs for installing and running Bro with BroControl
> http://svn.icir.org/bro/releases/release_1_5/bro/aux/broctl/README.html
>  .Seth
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro-ids.org/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20110119/b80dabb8/attachment.html 

More information about the Bro mailing list