[Bro] Can't Browse /etc/bro Directory

Damon Rouse damonrouse at gmail.com
Wed May 21 15:30:36 PDT 2014


Hi

I went to look at the files.log today, I can't see the bro directory

xxxxxxx at xxxxxxx:/etc/nsm$ ls
administration.conf  essorgso-eth2  pulledpork  securityonion
sensortab  templates
xxxxxx-eth1        ossec          rules       securityonion.conf  servertab

xxxxxxx at xxxxxxxx:/etc/nsm$ cd bro
-bash: cd: bro: No such file or directory
xxxxxx at xxxxxxx:/etc/nsm$

But I can see the data is there:

xxxxxxx at xxxxxxxx:~$ sudo ls -lah /nsm/bro
total 44K
drwxr-xr-x  5 root root 4.0K Sep  4  2013 .
drwxr-xr-x  6 root root 4.0K May 16 21:10 ..
drwxr-xr-x  2 root root  28K May 21 22:22 extracted
drwxr-xr-x  9 root root 4.0K May 21 22:03 logs
drwxr-xr-x 22 root root 4.0K May 21 22:20 spool

xxxxxxxx at xxxxxxxxxxx:~$ sudo ls -lah /nsm/bro/logs
total 228K
drwxr-xr-x 9 root root 4.0K May 21 22:03 .
drwxr-xr-x 5 root root 4.0K Sep  4  2013 ..
drwxr-xr-x 2 root root  20K May 17 00:00 2014-05-16
drwxr-xr-x 2 root root  36K May 18 00:00 2014-05-17
drwxr-xr-x 2 root root  40K May 19 00:00 2014-05-18
drwxr-xr-x 2 root root  40K May 20 00:00 2014-05-19
drwxr-xr-x 2 root root  36K May 21 21:34 2014-05-20
drwxr-xr-x 2 root root  36K May 21 22:03 2014-05-21
lrwxrwxrwx 1 root root   22 May 21 22:03 current -> /nsm/bro/spool/manager
drwxr-xr-x 3 root root 4.0K May 16 21:10 stats

I've stopped bro, did broctl check, then install and then start with no
errors.

Anyone have any ideas?  I haven't messed with permissions, but it
definitely seems to be a permission issue.

Thanks
Damon
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140521/dc2e5993/attachment.html 


More information about the Bro mailing list