[Bro] Bro 2.0 packets dropped

Seth Hall seth at icir.org
Mon Feb 6 11:46:02 PST 2012

On Feb 6, 2012, at 2:30 PM, William Jones wrote:

> Notice the ???.   It an indication that something is not working  correct;y the bro communication library. 

If you run "ps.bro" in broctl, what do you get?  I'm suspicious that the old #9 process didn't die and it's still holding the communication port open which would result in that error.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list