[Bro] Fwd: problem installing bro on ubuntu 10.04

rajasekhar reddy orsr88 at gmail.com
Wed Jan 19 12:58:33 PST 2011


thanx its done ...

can anyone please tell me how & where can i see bro ouput

please

On Wed, Jan 19, 2011 at 8:53 PM, rajasekhar reddy <orsr88 at gmail.com> wrote:

> hi
>
> root at raj-Satellite-L300:/path/to/bro/bin# broctl start
>
> No command 'broctl' found, did you mean:
>  Command 'brctl' from package 'bridge-utils' (main)
> broctl: command not found
>
> i am getting error when i did broctl installation thru this steps
>
> Installing a Stand-alone Bro
>
>  This is the default installation. Configure and compile Bro as usual,
> specifying the target installation path as `prefix` (we use /usr/local/broas an example):
>
> > cd /path/to/bro/source/distribution
> > ./configure --prefix=/usr/local/bro
> > make
>
>
>    -
>
>    Install *BroControl*:
>
>    > make install-broctl
>
>      (This includes the standard "make install".)
>
>     -
>
>    Add <prefix>/bin to your PATH.
>    -
>
>    The installation installs three configuration files which you should
>    edit:
>    -
>
>       etc/broctl.cfg is the overall *BroControl* configuration. Initially,
>       you probably only need to edit the email address for mails sent by the
>       framework; that's the MailTo line.
>       -
>
>       In etc/nodes.cfg, you need to specify the network interface Bro is
>       to monitor; that's the interface line.
>       -
>
>       In etc/networks.cfg, list all the networks which Bro should consider
>       as local to the monitored enviroment.
>        -
>
>    Once you have updated these files, install the modified configuration:
>
>    > broctl install
>
>     -
>
>    Some tasks need to be run on a regular basis. Insert a line like this
>    into your crontab:
>
>    0-59/5 * * * * /usr/local/bro/bin/broctl cron
>
>     -
>
>    Finally, you can start Bro:
>
>    > broctl start
>
>
> can anyone help me please
>
>
>
> On Wed, Jan 19, 2011 at 8:35 PM, sridhar basam <sri at basam.org> wrote:
>
>> It sounds like you need to get familiar with linux/unix in general. There
>> are a lot of excellent books on Linux on Amazon for questions such as these.
>> These questions aren't directly related to Bro.
>>
>> The below looks like a cron entry to be run every 5 minutes.
>>
>>  Sridhar
>>
>>
>> On Wed, Jan 19, 2011 at 3:30 PM, rajasekhar reddy <orsr88 at gmail.com>wrote:
>>
>>> hi
>>>
>>> Can any one know how to run this command..
>>>
>>> 0-59/5 * * * * /usr/local/bro/bin/broctl cron
>>>
>>> thaks & regards
>>> Rajasekhar
>>>
>>>
>>>
>>> On Wed, Jan 19, 2011 at 8:29 PM, rajasekhar reddy <orsr88 at gmail.com>wrote:
>>>
>>>>
>>>> thankx alot it wrks
>>>>
>>>>
>>>>
>>>> On Wed, Jan 19, 2011 at 8:19 PM, rajasekhar reddy <orsr88 at gmail.com>wrote:
>>>>
>>>>> yeah thanx i got that
>>>>>
>>>>> root at raj-Satellite-L300:/path/to/bro/bin# broctl install
>>>>> No command 'broctl' found, did you mean:
>>>>>  Command 'brctl' from package 'bridge-utils' (main)
>>>>> broctl: command not found
>>>>>
>>>>>
>>>>> can u tell me is this right path trying to install broctl or any other
>>>>> mistake
>>>>>
>>>>> Thaks & Regards
>>>>>
>>>>> On Wed, Jan 19, 2011 at 8:17 PM, rmkml <rmkml at free.fr> wrote:
>>>>>
>>>>>> use `sudo vi ...` for editing...
>>>>>> Regards
>>>>>> Rmkml
>>>>>>
>>>>>>
>>>>>>
>>>>>> On Wed, 19 Jan 2011, rajasekhar reddy wrote:
>>>>>>
>>>>>>  i find them but i can't able to edit those r in read only mode..
>>>>>>>
>>>>>>> Y need them i cant able to run my bro ids which is already
>>>>>>> installed..
>>>>>>>
>>>>>>> I hope u understand my problem
>>>>>>>
>>>>>>> On Wed, Jan 19, 2011 at 7:04 PM, Seth Hall <seth at icir.org> wrote:
>>>>>>>
>>>>>>>      On Jan 19, 2011, at 1:58 PM, rajasekhar reddy wrote:
>>>>>>>
>>>>>>>      >       • The installation installs three configuration files
>>>>>>> which you should edit:
>>>>>>>      >
>>>>>>>      >               • etc/broctl.cfg is the overall BroControl
>>>>>>> configuration. Initially, you probably only need to edit the email address
>>>>>>> for mails sent by the framework; that's the MailTo line.
>>>>>>>      >
>>>>>>>      >               • In etc/nodes.cfg, you need to specify the
>>>>>>> network interface Bro is to monitor; that's the interface line.
>>>>>>>      >
>>>>>>>      >               • In etc/networks.cfg, list all the networks
>>>>>>> which Bro should consider as local to the monitored enviroment.
>>>>>>>      >
>>>>>>>      >  CAN U PLS TELL ME HOW TO DO ABOVE STEPS
>>>>>>>
>>>>>>> Those files should be in your directory where you installed Bro.  You
>>>>>>> just need to edit them to suit your environment.  Looking at the format of
>>>>>>> those files should be fairly obvious where and how to change them.  Please
>>>>>>> ask
>>>>>>> if you have specific questions about how those files should be
>>>>>>> configured.
>>>>>>>
>>>>>>>  .Seth
>>>>>>>
>>>>>>> --
>>>>>>> Seth Hall
>>>>>>> International Computer Science Institute
>>>>>>> (Bro) because everyone has a network
>>>>>>> http://www.bro-ids.org/
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>
>>>>
>>>
>>> _______________________________________________
>>> Bro mailing list
>>> bro at bro-ids.org
>>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>>>
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20110119/afb82019/attachment.html 


More information about the Bro mailing list