[Bro] Problems running Bro

[Matthias Vallentin]

On Mar 16, 2008, at 5:11 AM, bec_agarcia at correo.seguridad.unam.mx wrote:

> Sorry but when i try to read a file i recive the next output
>
> root at lobito:/usr/local/bro/etc# /usr/local/bro/bin/bro -r  
> segment190.pcap
> line 1: error: can't open bro.init

This error means that Bro cannot find the policy scripts. The  
environment variable $BROPATH should contain the path to your policy  
script directory and to all other custom directories that include  
policy script files:

% BRO_DIR="/path/to/bro"
% export BROPATH="${BRO_DIR}/policy:${BRO_DIR}/policy/local:${BRO_DIR}/ 
policy/sigs"

     Matthias
-- 
Matthias Vallentin
vallentin at icsi.berkeley.edu
pgp/gpg: 0x37F34C16