[Bro] Regarding Broctl cron

Azoff, Justin S jazoff at illinois.edu
Wed Apr 12 07:34:19 PDT 2017

> On Apr 12, 2017, at 9:05 AM, LinuxBSDos.com <finid at vivaldi.net> wrote:
> Hello:
> I've set up a cron job for "broctl cron", and verified that the cron job 
> runs every 5 minutes. To test that the script works, I stop and watched 
> for it to be restart by the script, but it's not happening.
> I'm aware that the docs says the "main purpose of the BroControl cron 
> command is to check for Bro nodes that have crashed, and to restart 
> them". Though mine didn't crash, I'm expecting that the script will at 
> least notice that it's not running and restart it.
> Isn't that how it's supposed t work?

If you stopped bro on purpose it will not restart it.  If you want to test the restart functionality you will need to kill one of the bro processes.

- Justin Azoff

More information about the Bro mailing list