[Bro] ConnPolling::watch not working in cluster mode

Lamps, Jereme jlamps at sandia.gov
Tue Apr 19 08:55:17 PDT 2016


Hey guys,

Would anyone know why ConnPolling::watch does not seem to be working when I start it up with broctl (in cluster mode). When I start it up with just bro (standalone) it works fine. The line of code is:
ConnPolling::watch(s$conn, is_active, 0, 0sec);

I have a log statement right before this line which I am seeing, and I have a log statement as the first instruction in the is_active function that I am NOT seeing.

Thanks in advance,

Jereme

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160419/3239e52a/attachment.html 


More information about the Bro mailing list