[Bro] all broctl instances are running yet broctl status shows stopped

william de ping bill.de.ping at gmail.com
Wed Mar 21 03:58:09 PDT 2018

Hi Daniel,


I have deleted another bro environment on that server and doubled checked
that there are no other broctl\bro executable besides the work_dir and

Yet this issue still occures.
I run bro with a specific user and on "top" I see that bro is running under
that user, yet "./bin/broctl status" still returns that all instances are

Any suggestions ?

Thanks again

On Tue, Mar 20, 2018 at 8:47 PM, Daniel Thayer <dnthayer at illinois.edu>

> On 3/20/18 11:52 AM, william de ping wrote:
>> Hi
>> Thanks for your replies
>> broctl diag returns "HINT : Run broctl deploy to get started.
>> All the rest of the output is not populated
>> broctl deploy solves this issue, but I do not want to restart my cluster
>> every hour
>> B
> OK, that is what I expected.  You have two different copies of Bro
> installed on your system (doesn't matter if they are the same
> version or not), and I recommend removing one of them to
> avoid confusion.
> This problem could happen, for example, if you have two copies
> of Bro installed and you run "sudo broctl deploy", but then later
> you run "broctl status" and this actually runs the other copy (on
> most systems, "sudo" uses a different PATH than normal users).
> Each installation of Bro includes its own scripts, config files,
> executables, state file, etc.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20180321/7216ea59/attachment.html 

More information about the Bro mailing list