[Bro] Fwd: problem installing bro on ubuntu 10.04
seth at icir.org
Wed Jan 19 11:04:10 PST 2011
On Jan 19, 2011, at 1:58 PM, rajasekhar reddy wrote:
> • The installation installs three configuration files which you should edit:
> • etc/broctl.cfg is the overall BroControl configuration. Initially, you probably only need to edit the email address for mails sent by the framework; that's the MailTo line.
> • In etc/nodes.cfg, you need to specify the network interface Bro is to monitor; that's the interface line.
> • In etc/networks.cfg, list all the networks which Bro should consider as local to the monitored enviroment.
> CAN U PLS TELL ME HOW TO DO ABOVE STEPS
Those files should be in your directory where you installed Bro. You just need to edit them to suit your environment. Looking at the format of those files should be fairly obvious where and how to change them. Please ask if you have specific questions about how those files should be configured.
International Computer Science Institute
(Bro) because everyone has a network
More information about the Bro