[Bro] Fwd: problem installing bro on ubuntu 10.04
rajasekhar reddy
orsr88 at gmail.com
Wed Jan 19 10:43:31 PST 2011
hi guys thanks for ur concern
please i am very new to linux any one pls help me
i found some thing to wrk on bro ids..
can anyone tell me how to do these steps in configuring these steps in
configuration of bro ids
-
The installation installs three configuration files which you should
edit:
-
etc/broctl.cfg is the overall *BroControl* configuration. Initially,
you probably only need to edit the email address for mails sent by the
framework; that's the MailTo line.
-
In etc/nodes.cfg, you need to specify the network interface Bro is to
monitor; that's the interface line.
-
In etc/networks.cfg, list all the networks which Bro should consider
as local to the monitored enviroment.
thanks in advance
On Wed, Jan 19, 2011 at 6:24 PM, rajasekhar reddy <orsr88 at gmail.com> wrote:
>
> hi guys thanks for ur concern
>
> i found some thing to wrk on bro ids..
>
> can anyone tell me how to do these steps in configuring these steps in
> configuration of bro ids
>
>
> -
>
> The installation installs three configuration files which you should
> edit:
> -
>
> etc/broctl.cfg is the overall *BroControl* configuration. Initially,
> you probably only need to edit the email address for mails sent by the
> framework; that's the MailTo line.
> -
>
> In etc/nodes.cfg, you need to specify the network interface Bro is
> to monitor; that's the interface line.
> -
>
> In etc/networks.cfg, list all the networks which Bro should consider
> as local to the monitored enviroment.
>
> thanks in advance
>
> Rajasekhar
>
>
>
>
> On Wed, Jan 19, 2011 at 3:27 PM, Seth Hall <seth at icir.org> wrote:
>
>>
>> On Jan 19, 2011, at 7:40 AM, rajasekhar reddy wrote:
>>
>> > hi when i tried to run bro ids i am getting this error did i done any
>> mistake...
>> >
>> > root at ubuntu:/usr/local/bro/
>> > etc# bro.rc start
>>
>> Apologies for the documentation being so out of date, but the bro.rc has
>> not been included in the 1.5 release. If you want to just Bro as a normal
>> program, you can run the bro binary directly. If you want to run it as a
>> daemon watching live traffic you will likely want to run it with BroControl.
>> Here are some docs for installing and running Bro with BroControl
>>
>> http://svn.icir.org/bro/releases/release_1_5/bro/aux/broctl/README.html
>>
>> .Seth
>>
>> --
>> Seth Hall
>> International Computer Science Institute
>> (Bro) because everyone has a network
>> http://www.bro-ids.org/
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20110119/c1e0ba40/attachment.html
More information about the Bro
mailing list