[Bro] Script Must Be Run On Manager Node

[Justin Azoff]

On Thu, Jul 22, 2010 at 04:41:10PM -0400, Sam Oehlert wrote:
> I have a bro cluster set up (or mostly set up) on CentOS 5.5. I am
> using svn version 7048. I try to run /usr/local/bro/bin/broctl start
> and it replies with ERROR: Script must be run on manager node. I saw
> someone else with this issue who added some things to PATH, which I
> tried, and it still did not work. Does anyone know what could cause
> this?

two reasons:

1. you used 'localhost' or somehing in node.cfg.. i've had the best luck
using plain ip addresses.

2. broctl can't find ifconfig - this is often a problem with cron, my
bro crontab looks like

PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
0-59/5 * * * * root /usr/local/bro/bin/broctl cron


-- 
-- Justin Azoff
-- Network Security & Performance Analyst