[Bro] Fwd: problem installing bro on ubuntu 10.04

rajasekhar reddy orsr88 at gmail.com
Wed Jan 19 11:06:15 PST 2011


i find them but i can't able to edit those r in read only mode..

Y need them i cant able to run my bro ids which is already installed..

I hope u understand my problem

On Wed, Jan 19, 2011 at 7:04 PM, Seth Hall <seth at icir.org> wrote:

>
> On Jan 19, 2011, at 1:58 PM, rajasekhar reddy wrote:
>
> >       • The installation installs three configuration files which you
> should edit:
> >
> >               • etc/broctl.cfg is the overall BroControl configuration.
> Initially, you probably only need to edit the email address for mails sent
> by the framework; that's the MailTo line.
> >
> >               • In etc/nodes.cfg, you need to specify the network
> interface Bro is to monitor; that's the interface line.
> >
> >               • In etc/networks.cfg, list all the networks which Bro
> should consider as local to the monitored enviroment.
> >
> >  CAN U PLS TELL ME HOW TO DO ABOVE STEPS
>
> Those files should be in your directory where you installed Bro.  You just
> need to edit them to suit your environment.  Looking at the format of those
> files should be fairly obvious where and how to change them.  Please ask if
> you have specific questions about how those files should be configured.
>
>  .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro-ids.org/
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20110119/9a72bad9/attachment.html 


More information about the Bro mailing list