[Bro] Status crashed

[Seth Hall]

On Jun 1, 2013, at 10:21 AM, James Lay <jlay at slave-tothe-box.net> wrote:

> So…at some point in time, my bro crashed.  I lost about 4 days worth of data.  I checked syslogs and found no indication of this…is there any way to get a log or notification or something when this happens?  Thank you.


Do you have a cron job installed to run the "broctl cron" command?

Also, you probably want to check that the cron command is enabled with "broctl cron ?"

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/