[Bro] Fwd: problem installing bro on ubuntu 10.04

Seth Hall seth at icir.org
Wed Jan 19 11:04:10 PST 2011


On Jan 19, 2011, at 1:58 PM, rajasekhar reddy wrote:

> 	• The installation installs three configuration files which you should edit:
> 
> 		• etc/broctl.cfg is the overall BroControl configuration. Initially, you probably only need to edit the email address for mails sent by the framework; that's the MailTo line.
> 
> 		• In etc/nodes.cfg, you need to specify the network interface Bro is to monitor; that's the interface line.
> 
> 		• In etc/networks.cfg, list all the networks which Bro should consider as local to the monitored enviroment.
> 
>  CAN U PLS TELL ME HOW TO DO ABOVE STEPS

Those files should be in your directory where you installed Bro.  You just need to edit them to suit your environment.  Looking at the format of those files should be fairly obvious where and how to change them.  Please ask if you have specific questions about how those files should be configured.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/





More information about the Bro mailing list