[Bro] What am I doing wrong here?

David Caldwell dcaldwell at colsa.com
Wed Nov 29 09:12:12 PST 2006


Okay, I now have bro installed. Things appear to be in the right  
place. I must have missed something in the docs to get this working,  
and I am sure that it does not help that I am not exactly familiar  
with Debian. bear with me here as I stumble my way through a new OS  
and Bro. I expect I am going to ask alot of stupid questions, but I  
am documenting everything so that it may be used later to update or  
possibly improve the documentation or help someone else who is in the  
same boat I am.

Here is what I get when I try to start Bro from the command line:

jyd:/etc/rc3.d# /etc/init.d/bro.rc start
bro.rc: Running as non-root user bro
No directory, logging in with HOME=/
bro.rc: Starting ..........bro.rc: Failed to start Bro
/usr/local/bro/bin/bro: problem with interface eth1 - pcap_open_live:  
socket: Operation not permitted
.. FAILED

here are the outputs in the logs files in /usr/local/bro/logs:

/usr/local/bro/bin/bro: problem with interface eth1 - pcap_open_live:  
socket: Operation not permitted

Am I missing a permission issue here or what? Do I need to make some  
changes in a config file that I missed?

TIA

David Caldwell
Colsa-HMT




More information about the Bro mailing list