[Bro] BroLite install (was: Bro 1.4 release now available)

[Peter Hart-Davis - MWEB]

Hi again

Unfortunately it put the files into /usr/local/bro/site and not into
/usr/local/bro/share/site i.e. a bug.

The 'what goes where' or 'what is to be expected where' would be for the
new layout.

Something else I have picked up since is that running site-report.pl
returns the following error:  " Can't use an undefined value as a SCALAR
reference at ./site-report.pl line 1278."  Any suggestions would be
appreciated.


Peter

-----Original Message-----
From: bro-bounces at ICSI.Berkeley.EDU
[mailto:bro-bounces at ICSI.Berkeley.EDU] On Behalf Of Robin Sommer
Sent: 16 January 2009 11:18 PM
To: bro at ICSI.Berkeley.EDU; Peter Hart-Davis - MWEB
Subject: Re: [Bro] BroLite install (was: Bro 1.4 release now available)


On Fri, Jan 16, 2009 at 15:15 +0200, you wrote:

> I am new to Bro and the list so Greetings.

Welcome to Bro!

> On patching and running "make install-brolite" all seems good 'out of
> the box' except I had to add "/usr/local/bro/site" to BROPATH in
> etc/bro.cfg, from my reading I gather this is likely due to a new
> location of site to share/bro/site?

To make sure I understand what you mean: are you saying that you had
already policy files in /usr/local/bro/site which were now not found
anymore (in which case that's ok to require a BROPATH change
because, as you note, the standard location has changed); or are you
saying that the install process puts files into /usr/local/bro/site
which were then not found (in which case if would be a bug).

>   A suggestion, possibly a simple 'what goes where' or 'what is to
>   be expected where' in the docs?

Yeah, I guess that would be good, except as that this fix will be
only temporary anyway so it's mostly for people already using
BroLite. 

Thanks for the feedback!

Robin

-- 
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org
_______________________________________________
Bro mailing list
bro at bro-ids.org
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
New from MWEB: Cellphone and Internet bundles! Bundle your Internet access with your cellular contract from R75 per month. 
Call 08600 32000 or click here(http://www.mweb.co.za/productsservices/MTALKMobile/tabid/1223/Default.aspx) for more info on the great deals available.

MWEB :-)  JUST LIKE THAT

This electronic communication and the attached file(s) are subject to a disclaimer which can be accessed on the following link: Disclaimer - or copy the 
following URL into your browser - http://www.mweb.co.za/disclaimer. 
If you are unable to view the disclaimer, please contact abuse at mweb.com for a copy.