[Bro] Quick Notice question

James Lay jlay at slave-tothe-box.net
Fri Jan 24 13:13:25 PST 2014


On 2014-01-24 11:44, Kellogg, Brian D (OLN) wrote:
> Hmm, not sure.
>
> I usually edit the script with Notepad++ and then copy it into a Vi
> session on the SecurityOnion sensor.  Line 8 is a comment; at least 
> on
> mine.
>
> Try using "broctl check" and "broctl diag" after stopping bro and see
> if that turns up anything.  I'm pretty new to Bro so hopefully I'm 
> not
> leading you down the wrong path.
>
>
> Thank you,
> Brian Kellogg

Bah...turns out something funky with copy/paste 8-|  Opened the file in 
Notepad++ then pasted into a new file on the linux box and away it 
went..thanks again Brian.

James




More information about the Bro mailing list