[Bro] Fwd: problem installing bro on ubuntu 10.04
rajasekhar reddy
orsr88 at gmail.com
Wed Jan 19 12:58:33 PST 2011
thanx its done ...
can anyone please tell me how & where can i see bro ouput
please
On Wed, Jan 19, 2011 at 8:53 PM, rajasekhar reddy <orsr88 at gmail.com> wrote:
> hi
>
> root at raj-Satellite-L300:/path/to/bro/bin# broctl start
>
> No command 'broctl' found, did you mean:
> Command 'brctl' from package 'bridge-utils' (main)
> broctl: command not found
>
> i am getting error when i did broctl installation thru this steps
>
> Installing a Stand-alone Bro
>
> This is the default installation. Configure and compile Bro as usual,
> specifying the target installation path as `prefix` (we use /usr/local/broas an example):
>
> > cd /path/to/bro/source/distribution
> > ./configure --prefix=/usr/local/bro
> > make
>
>
> -
>
> Install *BroControl*:
>
> > make install-broctl
>
> (This includes the standard "make install".)
>
> -
>
> Add <prefix>/bin to your PATH.
> -
>
> The installation installs three configuration files which you should
> edit:
> -
>
> etc/broctl.cfg is the overall *BroControl* configuration. Initially,
> you probably only need to edit the email address for mails sent by the
> framework; that's the MailTo line.
> -
>
> In etc/nodes.cfg, you need to specify the network interface Bro is
> to monitor; that's the interface line.
> -
>
> In etc/networks.cfg, list all the networks which Bro should consider
> as local to the monitored enviroment.
> -
>
> Once you have updated these files, install the modified configuration:
>
> > broctl install
>
> -
>
> Some tasks need to be run on a regular basis. Insert a line like this
> into your crontab:
>
> 0-59/5 * * * * /usr/local/bro/bin/broctl cron
>
> -
>
> Finally, you can start Bro:
>
> > broctl start
>
>
> can anyone help me please
>
>
>
> On Wed, Jan 19, 2011 at 8:35 PM, sridhar basam <sri at basam.org> wrote:
>
>> It sounds like you need to get familiar with linux/unix in general. There
>> are a lot of excellent books on Linux on Amazon for questions such as these.
>> These questions aren't directly related to Bro.
>>
>> The below looks like a cron entry to be run every 5 minutes.
>>
>> Sridhar
>>
>>
>> On Wed, Jan 19, 2011 at 3:30 PM, rajasekhar reddy <orsr88 at gmail.com>wrote:
>>
>>> hi
>>>
>>> Can any one know how to run this command..
>>>
>>> 0-59/5 * * * * /usr/local/bro/bin/broctl cron
>>>
>>> thaks & regards
>>> Rajasekhar
>>>
>>>
>>>
>>> On Wed, Jan 19, 2011 at 8:29 PM, rajasekhar reddy <orsr88 at gmail.com>wrote:
>>>
>>>>
>>>> thankx alot it wrks
>>>>
>>>>
>>>>
>>>> On Wed, Jan 19, 2011 at 8:19 PM, rajasekhar reddy <orsr88 at gmail.com>wrote:
>>>>
>>>>> yeah thanx i got that
>>>>>
>>>>> root at raj-Satellite-L300:/path/to/bro/bin# broctl install
>>>>> No command 'broctl' found, did you mean:
>>>>> Command 'brctl' from package 'bridge-utils' (main)
>>>>> broctl: command not found
>>>>>
>>>>>
>>>>> can u tell me is this right path trying to install broctl or any other
>>>>> mistake
>>>>>
>>>>> Thaks & Regards
>>>>>
>>>>> On Wed, Jan 19, 2011 at 8:17 PM, rmkml <rmkml at free.fr> wrote:
>>>>>
>>>>>> use `sudo vi ...` for editing...
>>>>>> Regards
>>>>>> Rmkml
>>>>>>
>>>>>>
>>>>>>
>>>>>> On Wed, 19 Jan 2011, rajasekhar reddy wrote:
>>>>>>
>>>>>> i find them but i can't able to edit those r in read only mode..
>>>>>>>
>>>>>>> Y need them i cant able to run my bro ids which is already
>>>>>>> installed..
>>>>>>>
>>>>>>> I hope u understand my problem
>>>>>>>
>>>>>>> On Wed, Jan 19, 2011 at 7:04 PM, Seth Hall <seth at icir.org> wrote:
>>>>>>>
>>>>>>> On Jan 19, 2011, at 1:58 PM, rajasekhar reddy wrote:
>>>>>>>
>>>>>>> > • The installation installs three configuration files
>>>>>>> which you should edit:
>>>>>>> >
>>>>>>> > • etc/broctl.cfg is the overall BroControl
>>>>>>> configuration. Initially, you probably only need to edit the email address
>>>>>>> for mails sent by the framework; that's the MailTo line.
>>>>>>> >
>>>>>>> > • In etc/nodes.cfg, you need to specify the
>>>>>>> network interface Bro is to monitor; that's the interface line.
>>>>>>> >
>>>>>>> > • In etc/networks.cfg, list all the networks
>>>>>>> which Bro should consider as local to the monitored enviroment.
>>>>>>> >
>>>>>>> > CAN U PLS TELL ME HOW TO DO ABOVE STEPS
>>>>>>>
>>>>>>> Those files should be in your directory where you installed Bro. You
>>>>>>> just need to edit them to suit your environment. Looking at the format of
>>>>>>> those files should be fairly obvious where and how to change them. Please
>>>>>>> ask
>>>>>>> if you have specific questions about how those files should be
>>>>>>> configured.
>>>>>>>
>>>>>>> .Seth
>>>>>>>
>>>>>>> --
>>>>>>> Seth Hall
>>>>>>> International Computer Science Institute
>>>>>>> (Bro) because everyone has a network
>>>>>>> http://www.bro-ids.org/
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>
>>>>
>>>
>>> _______________________________________________
>>> Bro mailing list
>>> bro at bro-ids.org
>>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>>>
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20110119/afb82019/attachment.html
More information about the Bro
mailing list