Hi,<br><font size="2">
<br>we are 3 students of University of Milan (DTI - Crema): Paolo Tironi, Paolo Bettini and Matteo Morato.<br>
<br>We study for a project on Bro IDS.<br><br></font><font size="2">We install BRO only running ./configure and make, and then we setted
<br>
$ pwd<br>
/home/christian/devel/bro<br>
$ echo $BROPATH<br>
/home/christian/devel/bro/policy:/home/christian/devel/bro/policy/sigs<br>
<br>
Next, we setted the BRO_DNS_FAKE environment variable.<br>
<br>Finally we runned BRO:
$ ./src/bro -r trace1.tcpdump tcp scan alarm weird</font>.<br><br>We have some problems:<br><br>bt bin # bro -r trace1.tcpdump tcp scan alarm weird dns<br>/usr/local/bro/policy/bro.init, line 1: warning: problem initializing NB-DNS: connect(<a href="http://200.3.200.5">200.3.200.5</a>): Network is unreachable<br>
/usr/local/bro/policy/dns.bro, line 123: run-time error: error compiling pattern /^?.*([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+\.in-addr\.arpa)/<br>/usr/local/bro/policy/dns.bro, line 179: run-time error: error compiling pattern /^?.*(\.)/<br>
/usr/local/bro/policy/dns.bro, line 557: run-time error: error compiling pattern /^?.*(\?(PTR|\*.*in-addr).*)/<br>/usr/local/bro/policy/dns.bro, line 571: run-time error: error compiling pattern /^?.*(\?(PTR|\*.*in-addr).*)/<br>
line 1: warning: event handlers never invoked:<br>line 1: warning: account_tried<br><br>Is there anybody who can help me?<br>