[Bro] Fwd: problem installing bro on ubuntu 10.04
orsr88 at gmail.com
Wed Jan 19 10:24:03 PST 2011
hi guys thanks for ur concern
i found some thing to wrk on bro ids..
can anyone tell me how to do these steps in configuring these steps in
configuration of bro ids
The installation installs three configuration files which you should
etc/broctl.cfg is the overall *BroControl* configuration. Initially,
you probably only need to edit the email address for mails sent by the
framework; that's the MailTo line.
In etc/nodes.cfg, you need to specify the network interface Bro is to
monitor; that's the interface line.
In etc/networks.cfg, list all the networks which Bro should consider
as local to the monitored enviroment.
thanks in advance
On Wed, Jan 19, 2011 at 3:27 PM, Seth Hall <seth at icir.org> wrote:
> On Jan 19, 2011, at 7:40 AM, rajasekhar reddy wrote:
> > hi when i tried to run bro ids i am getting this error did i done any
> > root at ubuntu:/usr/local/bro/
> > etc# bro.rc start
> Apologies for the documentation being so out of date, but the bro.rc has
> not been included in the 1.5 release. If you want to just Bro as a normal
> program, you can run the bro binary directly. If you want to run it as a
> daemon watching live traffic you will likely want to run it with BroControl.
> Here are some docs for installing and running Bro with BroControl
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro