[Bro] Help with bro

Azoff, Justin S jazoff at illinois.edu
Thu Nov 24 05:18:24 PST 2016



> On Nov 24, 2016, at 4:44 AM, Yagyesh Srivastava <ysrivas at ncsu.edu> wrote:
> 
> When i use bro -Ci eth0 (i.e. the binary ), then i can see all the http.log, weird.log,conn.log files getting dumped in my current working directory. They have the correct information. So I dont think this is the case. Still can't get why Broctl wouldnt give me the logs

Because you didn't tell broctl to use -C.

https://www.bro.org/documentation/faq.html#why-isn-t-bro-producing-the-logs-i-expect-a-note-about-checksums

-- 
- Justin Azoff


More information about the Bro mailing list