[Bro] Status crashed

Seth Hall seth at icir.org
Sun Jun 2 17:53:31 PDT 2013

On Jun 1, 2013, at 10:21 AM, James Lay <jlay at slave-tothe-box.net> wrote:

> So…at some point in time, my bro crashed.  I lost about 4 days worth of data.  I checked syslogs and found no indication of this…is there any way to get a log or notification or something when this happens?  Thank you.

Do you have a cron job installed to run the "broctl cron" command?

Also, you probably want to check that the cron command is enabled with "broctl cron ?"


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list