[Bro] Fwd: problem installing bro on ubuntu 10.04

rajasekhar reddy orsr88 at gmail.com
Wed Jan 19 10:24:03 PST 2011


hi guys thanks for ur concern

i found some thing to wrk on bro ids..

can anyone tell me how to do these steps in configuring these steps in
configuration of bro ids


   -

   The installation installs three configuration files which you should
   edit:
   -

      etc/broctl.cfg is the overall *BroControl* configuration. Initially,
      you probably only need to edit the email address for mails sent by the
      framework; that's the MailTo line.
      -

      In etc/nodes.cfg, you need to specify the network interface Bro is to
      monitor; that's the interface line.
      -

      In etc/networks.cfg, list all the networks which Bro should consider
      as local to the monitored enviroment.

thanks in advance

Rajasekhar



On Wed, Jan 19, 2011 at 3:27 PM, Seth Hall <seth at icir.org> wrote:

>
> On Jan 19, 2011, at 7:40 AM, rajasekhar reddy wrote:
>
> > hi when i tried to run bro ids i am getting this error did i done any
> mistake...
> >
> > root at ubuntu:/usr/local/bro/
> > etc# bro.rc start
>
> Apologies for the documentation being so out of date, but the bro.rc has
> not been included in the 1.5 release.  If you want to just Bro as a normal
> program, you can run the bro binary directly.  If you want to run it as a
> daemon watching live traffic you will likely want to run it with BroControl.
>  Here are some docs for installing and running Bro with BroControl
>
> http://svn.icir.org/bro/releases/release_1_5/bro/aux/broctl/README.html
>
>  .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro-ids.org/
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20110119/b80dabb8/attachment.html 


More information about the Bro mailing list