[Bro] More questions

[jean-philippe luiggi]

Hello Paul,

You're right, using "bro.rc" is the best way to run the IDS (as far i
know).

I usually use it on OpenBSD as-is and have no problems.

Best regards,

Jean-philippe.


On Sat, 14 Jul 2007 16:52:45 -0500
Paul Schmehl <pauls at utdallas.edu> wrote:

> --On July 14, 2007 12:10:22 AM -0700 Vern Paxson <vern at icir.org>
> wrote:
> 
> >> Now I have another question - how do you daemonize bro?
> >
> > There's no mechanism beyond '&' from a shell.  I'm confused by your
> > statement that this isn't available from a startup script, since we
> > routinely run shell scripts (that then background things) on our
> > FreeBSD systems upon startup.
> >
> I figured it out.  I can't use a standard rc.subr script to start
> bro.  I have to use bro.rc.
> 
> Paul Schmehl (pauls at utdallas.edu)
> Senior Information Security Analyst
> The University of Texas at Dallas
> http://www.utdallas.edu/ir/security/