[Bro] What am I doing wrong here?

[Brian Tierney]

Did you do a 'make install-brolite'? If so, it looks like the bro user
account did not get created correctly. Check your /etc/passwd for a bro
user id, and make sure the home directory is correct (/usr/local/bro)


David Caldwell wrote:
> Okay, I now have bro installed. Things appear to be in the right  
> place. I must have missed something in the docs to get this working,  
> and I am sure that it does not help that I am not exactly familiar  
> with Debian. bear with me here as I stumble my way through a new OS  
> and Bro. I expect I am going to ask alot of stupid questions, but I  
> am documenting everything so that it may be used later to update or  
> possibly improve the documentation or help someone else who is in the  
> same boat I am.
> 
> Here is what I get when I try to start Bro from the command line:
> 
> jyd:/etc/rc3.d# /etc/init.d/bro.rc start
> bro.rc: Running as non-root user bro
> No directory, logging in with HOME=/
> bro.rc: Starting ..........bro.rc: Failed to start Bro
> /usr/local/bro/bin/bro: problem with interface eth1 - pcap_open_live:  
> socket: Operation not permitted
> .. FAILED
> 
> here are the outputs in the logs files in /usr/local/bro/logs:
> 
> /usr/local/bro/bin/bro: problem with interface eth1 - pcap_open_live:  
> socket: Operation not permitted
> 
> Am I missing a permission issue here or what? Do I need to make some  
> changes in a config file that I missed?
> 
> TIA
> 
> David Caldwell
> Colsa-HMT
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

-- 
------------------------------------------------------------------------
  Brian L. Tierney,   Lawrence Berkeley National Laboratory (LBNL)
  1 Cyclotron Rd.  MS: 50B-2239,  Berkeley, CA  94720
  tel: 510-486-7381    fax: 510-495-2998   efax: 425-642-4558
  bltierney at lbl.gov   http://www-didc.lbl.gov/~tierney
------------------------------------------------------------------------