[Bro] Timemachine and Bro 1.5.1?

[Powell, Scott]

I just downloaded and configured timemachine (http://www.net.t-labs.tu-berlin.de/research/tm/#download) and am attempting to integrate it with Bro 1.5.1. Upon defining my timemachinehost in broctl.conf and restarting Bro it caused my timemachine process to abort with the following error:

*** Broccoli error: bro_conn_new_socket called without prior initialization.
*** Initialization of the Broccoli library is now required.
*** See documentation for details. Aborting.

I noticed the latest download of timemachine is from February of 2009. However Bro 1.5.1 is a lot newer than that. Is anyone running the newest Bro IDS with timemachine? If so what is the workaround or fix for the above error?

Thanks,

Scott Powell
Unix Systems Engineer / Information Security Analyst
Office of the CIO - Information Systems (OCIO-IS)
Medical University of South Carolina
powellsm at musc.edu
(843) 792-6651

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20100302/c3dcb920/attachment.html