[Bro] Nodes still crashing/Site specific files
Siwek, Jonathan Luke
jsiwek at illinois.edu
Thu Jun 13 13:00:13 PDT 2013
On Jun 13, 2013, at 2:04 PM, "Richards, James L - DOA" <James.Richards at wisconsin.gov>
> /usr/local/bro/bin/bro: error while loading shared libraries: libpcap.so.0.8: cannot open shared object file: No such file or directory
That usually means the linker can't resolve a path to that library. Did you link against a libpcap that's installed in a non-standard path? If `ldd /usr/local/bro/bin/bro` tells you it can't find libpcap, it's either really missing from your system or you need to teach the linker how to find it in a non-standard path.
> In looking at the below diag... I am seeing an odd directory showing up in the BROPATH, it looks like there are some artifacts of previous installations...
> Where is the BROPATH set?
Check your etc/broctl.cfg to see if the paths are as you expect. I think at least SpoolDir goes in to BROPATH and if you just copied the file from a previous install, then it's going to be wrong.
More information about the Bro