[Bro] FW: ACLD implementation

[Anne Hutton]

you need to install socket from /usr/ports/sysutils on freebsd.....or
the package.

Anne

Weisbrod, Marc wrote:
>> All,
>>
>> I am having an issue getting ACLD working.   I have expect and Acld is running on my system.   When a "bad guy"  is identified by Bro.  It tries and shim in the ACL.    When that occurs I see the following error:
>>
>> acl.sh: Oct 26 16:10:18 drop 2.2.2.2
>> couldn't execute "socket": no such file or directoryerror setting blocking mode: resource temporarily unavailable
>>     while executing
>> "spawn socket -c $aclipaddr $aclport"
>>     (file "/usr/local/bro/bin/acl.sh" line 249)
>>
>> Am I missing a binary?  Or could this be an old version of acl.sh?
>>
>> Thank you,
>>
>> Marc
>>
>> Marc Weisbrod
>> Senior Security Engineer 
>> University of California, San Francisco
>> 1855 Folsom Street, Room 602
>> San Francisco, CA 94103
>>
>>
>>
> 
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> 

-- 
Anne Hutton
Computer Protection Program
Lawrence Berkeley National Lab
510-495-2681