[Bro] Fwd: problem installing bro on ubuntu 10.04
rajasekhar reddy
orsr88 at gmail.com
Wed Jan 19 10:24:03 PST 2011
hi guys thanks for ur concern
i found some thing to wrk on bro ids..
can anyone tell me how to do these steps in configuring these steps in
configuration of bro ids
-
The installation installs three configuration files which you should
edit:
-
etc/broctl.cfg is the overall *BroControl* configuration. Initially,
you probably only need to edit the email address for mails sent by the
framework; that's the MailTo line.
-
In etc/nodes.cfg, you need to specify the network interface Bro is to
monitor; that's the interface line.
-
In etc/networks.cfg, list all the networks which Bro should consider
as local to the monitored enviroment.
thanks in advance
Rajasekhar
On Wed, Jan 19, 2011 at 3:27 PM, Seth Hall <seth at icir.org> wrote:
>
> On Jan 19, 2011, at 7:40 AM, rajasekhar reddy wrote:
>
> > hi when i tried to run bro ids i am getting this error did i done any
> mistake...
> >
> > root at ubuntu:/usr/local/bro/
> > etc# bro.rc start
>
> Apologies for the documentation being so out of date, but the bro.rc has
> not been included in the 1.5 release. If you want to just Bro as a normal
> program, you can run the bro binary directly. If you want to run it as a
> daemon watching live traffic you will likely want to run it with BroControl.
> Here are some docs for installing and running Bro with BroControl
>
> http://svn.icir.org/bro/releases/release_1_5/bro/aux/broctl/README.html
>
> .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro-ids.org/
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20110119/b80dabb8/attachment.html
More information about the Bro
mailing list