[Bro] Bro Silent Crash
jlay at slave-tothe-box.net
Fri Dec 20 14:12:21 PST 2013
On 2013-12-20 15:00, Andy Schworer wrote:
> Possibly a newb question, but "broctl status" is reporting bro is
> running, but broctl restart reportings taht bro was not running
> because it crashed. Why the discrepancy? Also,
> log/current/stderr.log & srdout.log do not contain any information
> regarding the crash. Is this crash info stored else where?
>> root at node4:/usr/local/bro# bin/broctl status
>> Name Type Host Status Pid
>> Peers Started
>> bro standalone localhost running 22880 0
>> 06 Dec 23:49:28
>> root at node4:/usr/local/bro# bin/broctl restart
>> stopping ...
>> warning: cannot send mail
>> bro not running (was crashed)
>> starting ...
>> starting bro ...
How's your syslog lookin?
Dec 19 14:09:26 gateway kernel: bro: segfault at 0 ip (null) sp
00007fffa051d1a8 error 14 in bro[400000+4e3000]
More information about the Bro