[Bro] Install issue - Bro cluster

Blake Mattern mattern at caltech.edu
Thu Feb 10 12:12:09 PST 2011


Thanks for the info,
 
 I did as you said, and the recompile and install went well.
(no errors) But now I seem to get an error when trying to start /usr/loca/bro/bin/./broctl

# ./broctl 
error: script must be run on manager node


here is what the node.cfg looks like:

manager]
type=manager
host=is-bro1.is

[proxy-1]
type=proxy
host=is-bro1.is

[worker-1]
type=worker
host=is-bro2.is
interface=eth2

[worker-2]
type=worker
host=is-bro3.is
interface=eth2


Thanks,

 =-=Blake

On Thu, Feb 10, 2011 at 10:42:50AM -0600, Dop wrote:
> Blake,
> 
> Do you have an existing Bro installation at your target install location?
> I think I ran into this when I had 1.5.1 installation and tried to put
> 1.5.2 on top of it.  If you can't remove the existing install I'd try
> creating/editing your etc/node.cfg and setting the current system as the
> manager.
> 
> Then next thing you'll want to do is edit
> share/bro/broctl/cluster-addrs.hot.bro and comment out line 3 (the only
> line).
> 
> -Dop
> 
> -----Original Message-----
> From: Blake Mattern <mattern at caltech.edu>
> Date: Wed, 9 Feb 2011 15:38:32 -0800
> To: <Bro at bro-ids.org>
> Subject: [Bro] Install issue - Bro cluster
> 
> >Greetings all,
> >
> > I'm having an issue with the install of Bro via cluster mode. I receive
> >this error when I run make install-broctl:
> >
> >( cd aux/broctl && make install-broctl )
> >make[1]: Entering directory `/home/bro1/bro/bro-1.5.2/aux/broctl'
> >MAKE_DESTDIR= ./bin/make-wrapper install --make
> >error: script must be run on manager node
> >make[1]: *** [install-broctl] Error 1
> >make[1]: Leaving directory `/home/bro1/bro/bro-1.5.2/aux/broctl'
> >make: *** [install-broctl] Error 2
> >
> >This is on the machine I will use as the Managing / Proxy. I also have 2
> >other machines set as workers (they installed fine - No issues)
> >
> >Any ideas?
> >
> >Thanks,
> >
> > =-=Blake
> >
> >-- 
> >Blake Mattern
> >Information Security
> >California Institute of Technology
> >626-395-3512
> >mattern at caltech.edu
> >_______________________________________________
> >Bro mailing list
> >bro at bro-ids.org
> >http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> >
> 
> 

-- 
Blake Mattern
Information Security
California Institute of Technology
626-395-3512
mattern at caltech.edu



More information about the Bro mailing list