[Bro] smb crashing workers

Seth Hall seth at icir.org
Wed Mar 6 17:32:16 PST 2013

On Mar 6, 2013, at 7:09 PM, Mike Kolkebeck <mkolkebeck at gmail.com> wrote:

> I know the smb analyzer still has a few bugs in Bro-2.1 , but is there any way to prevent/catch the bro workers from infrequently crashing (~2-3 times per day, under peak periods)?

Yep, don't enable the SMB analyzer in 2.1. :)  

We don't have any scripts that enable it or use it because it's not ready and very incomplete in the 2.1 release.  Are you getting some logs or anything from it?


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list