[Bro] Fwd: problem installing bro on ubuntu 10.04

sridhar basam sri at basam.org
Wed Jan 19 12:35:29 PST 2011


It sounds like you need to get familiar with linux/unix in general. There
are a lot of excellent books on Linux on Amazon for questions such as these.
These questions aren't directly related to Bro.

The below looks like a cron entry to be run every 5 minutes.

 Sridhar


On Wed, Jan 19, 2011 at 3:30 PM, rajasekhar reddy <orsr88 at gmail.com> wrote:

> hi
>
> Can any one know how to run this command..
>
> 0-59/5 * * * * /usr/local/bro/bin/broctl cron
>
> thaks & regards
> Rajasekhar
>
>
>
> On Wed, Jan 19, 2011 at 8:29 PM, rajasekhar reddy <orsr88 at gmail.com>wrote:
>
>>
>> thankx alot it wrks
>>
>>
>>
>> On Wed, Jan 19, 2011 at 8:19 PM, rajasekhar reddy <orsr88 at gmail.com>wrote:
>>
>>> yeah thanx i got that
>>>
>>> root at raj-Satellite-L300:/path/to/bro/bin# broctl install
>>> No command 'broctl' found, did you mean:
>>>  Command 'brctl' from package 'bridge-utils' (main)
>>> broctl: command not found
>>>
>>>
>>> can u tell me is this right path trying to install broctl or any other
>>> mistake
>>>
>>> Thaks & Regards
>>>
>>> On Wed, Jan 19, 2011 at 8:17 PM, rmkml <rmkml at free.fr> wrote:
>>>
>>>> use `sudo vi ...` for editing...
>>>> Regards
>>>> Rmkml
>>>>
>>>>
>>>>
>>>> On Wed, 19 Jan 2011, rajasekhar reddy wrote:
>>>>
>>>>  i find them but i can't able to edit those r in read only mode..
>>>>>
>>>>> Y need them i cant able to run my bro ids which is already installed..
>>>>>
>>>>> I hope u understand my problem
>>>>>
>>>>> On Wed, Jan 19, 2011 at 7:04 PM, Seth Hall <seth at icir.org> wrote:
>>>>>
>>>>>      On Jan 19, 2011, at 1:58 PM, rajasekhar reddy wrote:
>>>>>
>>>>>      >       • The installation installs three configuration files
>>>>> which you should edit:
>>>>>      >
>>>>>      >               • etc/broctl.cfg is the overall BroControl
>>>>> configuration. Initially, you probably only need to edit the email address
>>>>> for mails sent by the framework; that's the MailTo line.
>>>>>      >
>>>>>      >               • In etc/nodes.cfg, you need to specify the
>>>>> network interface Bro is to monitor; that's the interface line.
>>>>>      >
>>>>>      >               • In etc/networks.cfg, list all the networks which
>>>>> Bro should consider as local to the monitored enviroment.
>>>>>      >
>>>>>      >  CAN U PLS TELL ME HOW TO DO ABOVE STEPS
>>>>>
>>>>> Those files should be in your directory where you installed Bro.  You
>>>>> just need to edit them to suit your environment.  Looking at the format of
>>>>> those files should be fairly obvious where and how to change them.  Please
>>>>> ask
>>>>> if you have specific questions about how those files should be
>>>>> configured.
>>>>>
>>>>>  .Seth
>>>>>
>>>>> --
>>>>> Seth Hall
>>>>> International Computer Science Institute
>>>>> (Bro) because everyone has a network
>>>>> http://www.bro-ids.org/
>>>>>
>>>>>
>>>>>
>>>>>
>>>
>>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20110119/0254c4aa/attachment.html 


More information about the Bro mailing list