[Bro] FW: ACLD implementation
Weisbrod, Marc
Marc.Weisbrod at ucsf.edu
Thu Oct 26 16:15:07 PDT 2006
> All,
>
> I am having an issue getting ACLD working. I have expect and Acld is running on my system. When a "bad guy" is identified by Bro. It tries and shim in the ACL. When that occurs I see the following error:
>
> acl.sh: Oct 26 16:10:18 drop 2.2.2.2
> couldn't execute "socket": no such file or directoryerror setting blocking mode: resource temporarily unavailable
> while executing
> "spawn socket -c $aclipaddr $aclport"
> (file "/usr/local/bro/bin/acl.sh" line 249)
>
> Am I missing a binary? Or could this be an old version of acl.sh?
>
> Thank you,
>
> Marc
>
> Marc Weisbrod
> Senior Security Engineer
> University of California, San Francisco
> 1855 Folsom Street, Room 602
> San Francisco, CA 94103
>
>
>
More information about the Bro
mailing list