[Bro] FW: ACLD implementation

Weisbrod, Marc Marc.Weisbrod at ucsf.edu
Thu Oct 26 16:15:07 PDT 2006


> All,
> 
> I am having an issue getting ACLD working.   I have expect and Acld is running on my system.   When a "bad guy"  is identified by Bro.  It tries and shim in the ACL.    When that occurs I see the following error:
> 
> acl.sh: Oct 26 16:10:18 drop 2.2.2.2
> couldn't execute "socket": no such file or directoryerror setting blocking mode: resource temporarily unavailable
>     while executing
> "spawn socket -c $aclipaddr $aclport"
>     (file "/usr/local/bro/bin/acl.sh" line 249)
> 
> Am I missing a binary?  Or could this be an old version of acl.sh?
> 
> Thank you,
> 
> Marc
> 
> Marc Weisbrod
> Senior Security Engineer 
> University of California, San Francisco
> 1855 Folsom Street, Room 602
> San Francisco, CA 94103
> 
> 
> 





More information about the Bro mailing list