[Bro] Bro crashed this morning..

erik clark philosnef at gmail.com
Mon Oct 24 10:07:42 PDT 2016


Did you check to see if it is being killed off by OOMkiller??? We see that
bro gets killed off by OOM killer periodically (I think we might have
similar traffic profiles), but that should just kill off a worker or two,
not the entire process. Check for that in /var/log/messages.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161024/202ae480/attachment.html 


More information about the Bro mailing list