[Bro] Cluster input framework in 2.2 beta

Lou RUPPERT himself at louruppert.com
Thu Oct 10 10:35:52 PDT 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey,

My bro_tor scripts didn't seem to survive the transition to 2.2 beta.
My guess is that the worker nodes are limited in which files they are
permitted to access somehow. Here's the error message that causes the
worker processes to crash:

1381424606.274441 fatal error in
/var/spool/bro/installed-scripts-do-not-touch/site/bro_tor/././check.bro,
lines 15-16: Failed to read tor hostlist from
/usr/local/bro/site/tor_servers.txt

Any ideas what I'm doing wrong or how to fix it? It seems a crash is a
bit harsh of a reaction to something like that.

The code is here:https://github.com/lruppert/bro-tor


- -- 
I prefer encrypted email.  Get my key here:
http://www.louruppert.com/keys/115DCF62.asc
PGP Fingerprint: 3261 B9F9 9363 D512 56F8  12DD 127F 4D6A 115D CF62
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Icedove - http://www.enigmail.net/

iEYEARECAAYFAlJW5XIACgkQEn9NahFdz2JraQCg2VbjTOzsmKdvJ5dbb8Tyh6yn
DQEAniJZ4Vyax4ZMwGQQm8WEEbYVd+CY
=ysDZ
-----END PGP SIGNATURE-----



More information about the Bro mailing list