[Bro] Writing Bro logs as a different user

Adam Hall abhall1 at yahoo.com
Tue Nov 24 07:13:24 PST 2015


Good Evening Bro Community,
I have an issue I need resolving about running bro as a user or group or at least writing logs as a certain user or group.
I have a script that performs a search through my bro logs, groups the results by file location(conn,http,dns),applies the headers of each file type to each group, and then formats everything in csv.  Next, I pull down the data through a simple web interface.
The problem I am having is that apache can't access my bro logs and I don't see a way that I can just tell broto write all it's logs as a certain user.
1) Is there an option to tell bro to write logs as user somebody or group somebody?2) Is there a way to run bro as a different user other than root?
I am using bro-2.4.I have looked through the ./configure and there are no options for group or user in there.
Thanks,
Adam Hall
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20151124/c9476200/attachment.html 


More information about the Bro mailing list