[Bro] Bro hanging on some sensors

Seth Hall seth at icir.org
Tue Jun 24 13:51:31 PDT 2014

On Jun 21, 2014, at 6:54 PM, Kellogg, Brian D (OLN) <bkellogg at dresser-rand.com> wrote:

> So far, the most reliable way of getting an intel file loaded is by commenting out apt1 and only enabling one intel file.

I suspect what's going on is some sort of resource overload issue right at Bro startup and that's causing some other "downstream" stuff to fail.  If I get a chance sometime I may write a new script for you to load intelligence with so that it never tries to load more than one intel file at a time. (or someone else could write that!)

Thanks for reporting the issue.  Hopefully we can figure it out together. ;)


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140624/a734e5f9/attachment.bin 

More information about the Bro mailing list