[Bro] Running external command line programs

[Seth Hall]

On Feb 21, 2013, at 4:47 PM, Chris Crawford <christopher.p.crawford at gmail.com> wrote:

> Is there another way to load the listen script?

Oh, I think it's because you're reading a packet capture.  When reading packets from a file you can't enable the communication framework.

Just try taking out the -r argument.  You should be able to just put frameworks/communication/listen on the command line too instead of the full file path.  Also, Bro won't terminate until you kill it.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/