[Bro] Bro 2.0 packets dropped

Seth Hall seth at icir.org
Mon Feb 6 11:46:02 PST 2012


On Feb 6, 2012, at 2:30 PM, William Jones wrote:

> Notice the ???.   It an indication that something is not working  correct;y the bro communication library. 


If you run "ps.bro" in broctl, what do you get?  I'm suspicious that the old #9 process didn't die and it's still holding the communication port open which would result in that error.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/





More information about the Bro mailing list