[Bro] Status crashed

James Lay jlay at slave-tothe-box.net
Mon Jun 3 03:39:50 PDT 2013


On Jun 2, 2013, at 6:53 PM, Seth Hall <seth at icir.org> wrote:

> 
> On Jun 1, 2013, at 10:21 AM, James Lay <jlay at slave-tothe-box.net> wrote:
> 
>> So…at some point in time, my bro crashed.  I lost about 4 days worth of data.  I checked syslogs and found no indication of this…is there any way to get a log or notification or something when this happens?  Thank you.
> 
> 
> Do you have a cron job installed to run the "broctl cron" command?
> 
> Also, you probably want to check that the cron command is enabled with "broctl cron ?"
> 
>  .Seth
> 
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/


I'd neglected to add that in….thanks Seth!

James



More information about the Bro mailing list