[Bro] broctl unable to find peers

Daniel Thayer dnthayer at illinois.edu
Wed Dec 21 10:54:43 PST 2016


What happens if you run "broctl peerstatus"? (after starting
the cluster, of course)


On 12/21/16 11:18 AM, Zeolla at GMail.com wrote:
> I'm seeing an issue using bro 2.4.1 where when I run `./broctl status`
> it hangs on 'Getting peer status ...'.  When I run the same command
> specifying manager, any of the proxies, or any of the individual workers
> it has no issue.  Has anybody seen this before?
>
> This is a 5 node cluster (1 manager, 4 sensors) running on Ubuntu
> 14.04.  I am in the process of upgrading to 2.5, but before I do so I'm
> adding 2 additional sensor machines (bringing it to 7 nodes) to the
> cluster because we sorely need the additional processing power.  After
> the upgrade to 2.5 I will be adding another node and splitting the
> logger function onto it, making it an 8 node cluster.
>
> Here's an example of me running `./broctl status` and it failing after 3
> 1/2 minutes, then it goes on to successfully get the status for every
> component/instance specifically, however the Peers section returns "???".
>
> $ time ./broctl status || time ./broctl status manager;time for proxy in
> {1..5}; do ./broctl status proxy-${proxy}; done;for svr in {1..4}; do
> for instance in {1..20}; do ./broctl status worker-${svr}-${instance};
> done; done
>
> removing stale lock
>
> Getting process status ...
>
> Getting peer status ...
>
> Killed
>
>
> real3m35.233s
>
> user0m0.126s
>
> sys0m0.119s
>
> waiting for lock (owned by PID 22222) ...
>
> Getting process status ...
>
> Getting peer status ...
>
> Name         Type    Host             Status    Pid    Peers  Started
>
> manager      manager A.B.C.D   running   11111  ???    18 Dec 03:24:38
>
> <snip>
>
>
> Jon
> --
>
> Jon
>
> Sent from my mobile device
>
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>


More information about the Bro mailing list