[Bro] remote.bro

Sandro Reichert sanreich at gmx.de
Sat Oct 7 10:21:00 PDT 2006


Hi Christian,


 >> but - it only works with traffic on the listening interface - is that
 >> right? i dont have a network trap or something like this, my
 >> configuration for testing is:
 >> 2 PCs with 1 eth interface connected to a switch.
 >> when i start both bros, there is nothing written into the remote-logs
 >> until i start a port-scan to generate traffic. what would be the best
 >> way to generate dummy traffic ?
 >
 > Mhmmm this is not supposed to happen any more -- older versions did
 > indeed have the problem that communication was "driven" by observing
 > live traffic, but as of 1.1 this should be fixed. Things depend on
 > whether your OS supports selectable file descriptors or not. Could you
 > please tell us what OS you are on, and post (or send me) the config.h
 > file you obtain after running configure? Thanks.

Im using Suse 10.0 on both machines. One Bro1.1 runs on PC 'A', the 
other on PC 'B' runs on VMware Server, because I started testing with 
our wireless 0.9a9 edition and we havnt finished the wireless patch for 
1.1 yet. It should be done within the next days.

A: Suse 10.0 & Bro 1.1
B: Suse 10.0 & "Bro-wireless" 0.9a9
    VMware: Suse 10.0 Bro 1.1

The config.h are equal on both machines.

bye, Sandro				

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: config.h
Url: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20061007/2042b302/attachment.h 


More information about the Bro mailing list