[Bro] question: "intel.log" not generated

Daniel Thayer dnthayer at illinois.edu
Fri Oct 3 09:58:58 PDT 2014


On 10/02/2014 11:36 AM, Daniel Thayer wrote:
> On 10/01/2014 02:37 PM, Ren, Wenyu wrote:
>> Hi everyone,
>>
>> I am new to Bro and I am learning to use the Intelligence framework. I followed the Bro Intel Framework Exercises which can be found in the following link.
>> https://www.bro.org/current/exercises/intel/index.html
>>
>> For the first exercise, everything went well except that no "intel.log" file was generated. Does anyone know the reason and how to get it work?
>>
>> Thanks a lot.
>>
>> Wenyu
>>
>
> I tried it and encountered the same problem.
>
> It seems that the pcap file got truncated somehow.
> I still have a copy of the pcap file that was
> originally distributed for these exercises and the
> original file is much larger.


I've replaced the "exercise-traffic.pcap" file on the web site
with the original file, so the exercise should work now.




More information about the Bro mailing list