[Bro] My continuing lock file issue
Richards, James L - DOA
James.Richards at wisconsin.gov
Mon Jun 3 14:01:01 PDT 2013
It was, under var/spool/cron/crontabs.
I got rid of the entries, and broctl now works flawlessly.
But now my nodes won't start, I can see the 'install' command happily updating the nodes via ssh, but they won't start. So I started to chase it down via the scripts to run at startup (smtp, connections, software, etc.), so I copied the sites/local.bro from an older subdirectory (previous install) to my new install, but now manager is stopping with an error.
No replies necessary, as I think I am almost there.
Thanks all for your help, it is appreciated, and I have learned a bunch.
Office of Security
Wisconsin Department of Administration
From: Robin Sommer [mailto:robin at icir.org]
Sent: Friday, May 31, 2013 5:02 PM
To: Richards, James L - DOA
Cc: bro at bro.org
Subject: Re: [Bro] My continuing lock file issue
On Fri, May 31, 2013 at 15:16 -0500, Richards, James L - DOA wrote:
> I do notice that when I go into /usr/local/bro/spool, I get some files
> showing up being owned by root, and it doesn't seem it should be.
Just a guess: is "broctl cron" executed from the system crontab?
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org/robin
More information about the Bro