[Bro] Running external command line programs
seth at icir.org
Thu Feb 21 13:54:35 PST 2013
On Feb 21, 2013, at 4:47 PM, Chris Crawford <christopher.p.crawford at gmail.com> wrote:
> Is there another way to load the listen script?
Oh, I think it's because you're reading a packet capture. When reading packets from a file you can't enable the communication framework.
Just try taking out the -r argument. You should be able to just put frameworks/communication/listen on the command line too instead of the full file path. Also, Bro won't terminate until you kill it.
International Computer Science Institute
(Bro) because everyone has a network
More information about the Bro