[Bro] does bro need root privilege?
dnthayer at illinois.edu
Wed May 24 08:49:34 PDT 2017
Which version of Bro are you using?
On 5/23/17 2:08 PM, Kenneth Goldman wrote:
> Daniel Thayer <dnthayer at illinois.edu> wrote on 05/22/2017 04:47:08 PM:
>> From: Daniel Thayer <dnthayer at illinois.edu>
>> To: Kenneth Goldman <kgoldman at us.ibm.com>, <bro at bro.org>
>> Date: 05/22/2017 04:47 PM
>> Subject: Re: [Bro] does bro need root privilege?
>> The BroControl documentation explains how to run as a normal user:
> The spool and logs directories are in my home directory, and I edited
> /etc/bro/broctl.cfg to point to them. They are rwx.
> SpoolDir = /home/kgold/bro/spool
> LogDir = /home/kgold/bro/logs
> I'm still getting this error:
>> > [BroControl] > install
>> > Error: running "bro -v" failed with output:
>> > can't open 'debug.log' for debugging output
> Perhaps I'm editing the wrong configuration file and it's still
> trying to open debug.log in a different directory?
> Bro mailing list
> bro at bro-ids.org
More information about the Bro