[Bro-Dev] #622: Installation issues

[Bro Tracker]

#622: Installation issues
----------------------+------------------------
  Reporter:  robin    |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro1.6
 Component:  Bro      |    Version:  git/master
Resolution:           |   Keywords:  beta
----------------------+------------------------

Comment (by jsiwek):

 > - It creates "$prefix/logs". I don't remember whether we discussed
 >   this already, but is that a good default location for logs?

 It's slightly more complicated, generally it's `$prefix/logs` when
 compiling from source, `/var/opt/bro/logs` for the current binary
 packages, and `/var/log/bro` in the special case of `$prefix == /usr`.
 They're all reasonable IMO, plus they're configurable afterwards in
 `broctl.cfg` via `LogDir`, but do you think it would be improved by

 1) consistently use "log" versus "logs"
 2) in the general case, use `$prefix/log/bro`

 > - Was there a reason we install the spool pieces directly into
 >   $prefix/spool/ instead of into $prefix/spool/bro/?

 There's again minor variation similar to the way the log dir is explained
 above, but I don't think there's a real reason why the later isn't used;
 I'll try it out and see.

 > - test-all-policy.bro ends up in share/bro, which doesn't seem right.

 Yeah, I'll take care of it.

 > - Do we really need to install share/bro/site/local-proxy.bro? It's
 >   empty and unlikley that many people will want to edit it.

 Seems pretty harmless to me.  Seth, thoughts?

 > - Thoughts about local.bro:
 >
 >     * Why is "@load protocols/http/detect-webapps" commented out? We
 >     should add a comment explaining when one would want to include it.
 >
 >     * "Requires that the Site::local_zones variable". We should add
 >     where/how to do that. Perhaps an empty definition right in
 >     local.bro?

 Seth, can you get this?

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/622#comment:3>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker