[Bro] Worker in cluster with different processor architecture

[Daniel Thayer]

If you apply the attached patch (untested, but I think it might work),
and then do a fresh install of Bro on all machines in your cluster (it
must be installed on the same path on all machines), then when you do
a "broctl install" or "broctl deploy", it shouldn't copy your binaries
from the manager to the workers.  If you later want to install a Bro
or broctl plugin, you must do so separately on all machines in your
cluster.




On 08/23/2015 02:46 PM, Jamie Saker wrote:
> I’ve got a new cluster being run with a manager on Intel hardware but
> the worker  on Raspberry Pi 2.  The Raspberry Pi was previously working
> in standalone mode successfully with Bro 2.4 compiled and installed.
> When I moved it into the manager/worker configuration, all went well
> with the installation except for the inevitable error due to the manager
> pushing an Intel executable over to the worker which it can’t recognize/run:
>
> /usr/local/bro/bin/bro: 3: /usr/local/bro/bin/bro: Syntax error:
> Unterminated quoted string
> /usr/local/bro/bin/bro: 1: /usr/local/bro/bin/bro: ELF: not found
>
> I’ve scanned the online documentation and googled but haven’t yet found
> a workaround; I’d imagine there might be a way to have the master not
> overwrite the binaries and allow the native Raspberry Pi compiled
> binaries run? Or another approach I’m missing? Processor info follows
> the .sig. Thanks much.
>
> Jamie Saker
> cosmotraumatika at gmail.com <mailto:cosmotraumatika at gmail.com>
> BroCon 2015 Attendee (Yea!)
>
>
> _[Manager] (VMWare)_
> processor: 0
> vendor_id: GenuineIntel
> cpu family: 6
> model: 6
> model name: QEMU Virtual CPU version 2.0.0
>
> processor: 1
> vendor_id: GenuineIntel
> cpu family: 6
> model: 6
> model name: QEMU Virtual CPU version 2.0.0
>
> _[Worker-1] _
>
> processor: 0
> model name: ARMv7 Processor rev 5 (v7l)
> BogoMIPS: 38.40
> Features: half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt
> vfpd32 lpae evtst
> rm
> CPU implementer: 0x41
> CPU architecture: 7
> CPU variant: 0x0
> CPU part: 0xc07
> CPU revision: 5
>
> processor: 1
> model name: ARMv7 Processor rev 5 (v7l)
> BogoMIPS: 38.40
> Features: half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt
> vfpd32 lpae evtst
> rm
> CPU implementer: 0x41
> CPU architecture: 7
> CPU variant: 0x0
> CPU part: 0xc07
> CPU revision: 5
>
> processor: 2
> model name: ARMv7 Processor rev 5 (v7l)
> BogoMIPS: 38.40
> Features: half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt
> vfpd32 lpae evtst
> rm
> CPU implementer: 0x41
> CPU architecture: 7
> CPU variant: 0x0
> CPU part: 0xc07
> CPU revision: 5
>
> processor: 3
> model name: ARMv7 Processor rev 5 (v7l)
> BogoMIPS: 38.40
> Features: half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt
> vfpd32 lpae evtst
> rm
> CPU implementer: 0x41
> CPU architecture: 7
> CPU variant: 0x0
> CPU part: 0xc07
> CPU revision: 5
>
> Hardware: BCM2709
> Revision: a21041
> Serial: 000000002c3a22ee
>
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: broctl.diff
Type: text/x-patch
Size: 602 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150824/2f18c52a/attachment-0001.bin