[Bro] All cluster instances are stopped yet their process is alive

william de ping bill.de.ping at gmail.com
Tue Aug 8 01:32:38 PDT 2017


I am encountering a strange behavior here, I have a cluster (1
manager,1proxy,8 workers) and after a while :

   - For some reason all of its instances appears as stopped
   - In the spool directory, I see an empty debug.log, manager folder and
   NO workers\tmp\proxy folders
   - Logs are still being written to the manager folder
   - All of bro's instances are actually still alive

I used to have a "broctl cron" task in crontab, but it has been commented

I ran Broctl using root user, and I see that all of bro's processes run as

any advice on this issue ?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170808/d9e434ac/attachment.html 

More information about the Bro mailing list