[Bro] broctl worker-1 cluster problem

jessebort at hushmail.com jessebort at hushmail.com
Thu Aug 29 18:09:00 PDT 2013


I'm a new bro user and  have tried to find the answer to this, but
have had no luck.  I've got  version 2.1 installed.  I can run bro in
standalone mode with no  problem, but I've tried to install a bro
cluster with worker-1 on a  remote host/VM with the same problem. 
Here is what I've tried to do:

created user jesse on both manager/proxy - 192.168.43.1
   o configured node.cfg for manager and proxy to be 192.168.43.1
   o configured node.cfg for worker-1 to be 192.168.43.130
   o performed ssh-keygen as user jesse
   o copied .ssh/rsa_id.pub to 192.168.43.130
/home/jesse/.ssh/authorized_keys
   o able to ssh as jesse from 192.168.43.1 to 192.168.43.130 with no
required password/passphrase
   o added jesse to /etc/sudoers to do everything root can

created user jesse on worker-1 192.168.43.130 (VM)
   o changed owner of /usr/local/bro to jesse
   o added jesse to /etc/sudoers to do everything root can

as user jesse on manager/proxy > sudo broctl
[BroControl] > install
removing old policies in
/usr/local/bro/spool/installed-scripts-do-not-touch/site ... done.
removing old policies in
/usr/local/bro/spool/installed-scripts-do-not-touch/auto ... done.
creating policy directories ... done.
installing site policies ... done.
generating cluster-layout.bro ... done.
generating local-networks.bro ... done.
generating broctl-config.bro ... done.
updating nodes ... warning: host 192.168.43.130 is not alive   install
waiting for lock ..... ok
removing old policies in
/usr/local/bro/spool/installed-scripts-do-not-touch/site ... done.
removing old policies in
/usr/local/bro/spool/installed-scripts-do-not-touch/auto ... done.
creating policy directories ... done.
installing site policies ... done.
generating cluster-layout.bro ... done.
generating local-networks.bro ... done.
generating broctl-config.bro ... done.
updating nodes ... done.                                              
    diag worker-1
[worker-1]
No work dir found
[BroControl] > start
starting manager ...
starting proxy-1 ...
starting worker-1 ...
cannot create working directory for worker-1                         
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130829/2882fb72/attachment.html 


More information about the Bro mailing list