[Bro] Fwd: problem installing bro on ubuntu 10.04
orsr88 at gmail.com
Wed Jan 19 11:06:15 PST 2011
i find them but i can't able to edit those r in read only mode..
Y need them i cant able to run my bro ids which is already installed..
I hope u understand my problem
On Wed, Jan 19, 2011 at 7:04 PM, Seth Hall <seth at icir.org> wrote:
> On Jan 19, 2011, at 1:58 PM, rajasekhar reddy wrote:
> > • The installation installs three configuration files which you
> should edit:
> > • etc/broctl.cfg is the overall BroControl configuration.
> Initially, you probably only need to edit the email address for mails sent
> by the framework; that's the MailTo line.
> > • In etc/nodes.cfg, you need to specify the network
> interface Bro is to monitor; that's the interface line.
> > • In etc/networks.cfg, list all the networks which Bro
> should consider as local to the monitored enviroment.
> > CAN U PLS TELL ME HOW TO DO ABOVE STEPS
> Those files should be in your directory where you installed Bro. You just
> need to edit them to suit your environment. Looking at the format of those
> files should be fairly obvious where and how to change them. Please ask if
> you have specific questions about how those files should be configured.
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro