[Bro] Packet Drops

Tom OBrion hammadog at gmail.com
Wed May 9 11:44:05 PDT 2012


Well new version of UBuntu:

Distributor ID:	Ubuntu
Description:	Ubuntu 11.04
Release:	11.04
Codename:	natty

I do not see that log file being created.  I do see:

/usr/local/bro/share/bro/policy/misc/capture-loss.bro

in loaded_scripts.log

Do I feed it to the birds now?  :)

Tom

On Wed, May 9, 2012 at 1:57 PM, Seth Hall <seth at icir.org> wrote:
>
> On May 9, 2012, at 1:16 PM, Tom OBrion wrote:
>
>> I loaded capture-loss and I assume you wanted some
>> date out of the notice.log about the packet drops?
>
> You will have a new log named capture_loss.log.  Could we see some lines from that?
>
>  .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro-ids.org/
>




More information about the Bro mailing list