[Bro] Status crashed
seth at icir.org
Sun Jun 2 17:53:31 PDT 2013
On Jun 1, 2013, at 10:21 AM, James Lay <jlay at slave-tothe-box.net> wrote:
> So…at some point in time, my bro crashed. I lost about 4 days worth of data. I checked syslogs and found no indication of this…is there any way to get a log or notification or something when this happens? Thank you.
Do you have a cron job installed to run the "broctl cron" command?
Also, you probably want to check that the cron command is enabled with "broctl cron ?"
International Computer Science Institute
(Bro) because everyone has a network
More information about the Bro