[Bro] Just getting started

Robin Sommer robin at icir.org
Wed Jan 9 11:40:13 PST 2013

On Wed, Jan 09, 2013 at 13:03 -0600, Paul Schmehl wrote:

> I just installed Bro (on FreeBSD 8.3) and got it up and running. I'm 
> working my way through the docs, and I decided to do the local.bro edit for 
> the Invalid SSL Certs that's described in the docs.
> However, when I launched broctl and typed check, I got this:  waiting for 
> lock ..................................cannot get lock
> I got the same thing when I typed stop as well as diag.
> When I started broctl initially, I typed "install" and then "start".  Then 
> I closed broctl.  Apparently you're supposed to leave broctl running?

No, it's not supposed to be running, however it sounds like a previous
run didn't terminate. Did you do the crontab entry as described in the
docs? If so, it could be that the cron job was just running as you
tried to check the config; there can only be one broctl at a time. But
if the problem persists, an earlier broctl process probably hangs;
check with ps and just kill it.


Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org

More information about the Bro mailing list