[Bro] Where are the log files when DNS monitoring ran by cli ?

anthony kasza anthony.kasza at gmail.com
Wed Oct 22 07:30:01 PDT 2014


Try running

bro -C -i eth0 -i eth1

By default, all scripts in base/ are loaded when calling Bro. Log files are
dropped in your working directory when running bro without broctl.
Just a note, don't ever change scripts in base/.

-AK
On Oct 22, 2014 6:58 AM, "John Donnelly" <jdonnelly at dyn.com> wrote:

> No changes made to broctl.cfg !
>
> I am running bro outside of broctl .. are those setting read by bro during
> startup ?
>
> On Wed, Oct 22, 2014 at 8:34 AM, Seth Hall <seth at icir.org> wrote:
>
>>
>> On Oct 22, 2014, at 9:25 AM, John Donnelly <jdonnelly at dyn.com> wrote:
>>
>> > The logs appear when I start bro using broctl .
>>
>> I get the sense you've made changes to broctl's configuration then.  Did
>> you add broars=-C to broctl.cfg perhaps?
>>
>>   .Seth
>>
>> --
>> Seth Hall
>> International Computer Science Institute
>> (Bro) because everyone has a network
>> http://www.bro.org/
>>
>>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20141022/51b7e442/attachment.html 


More information about the Bro mailing list