[Bro] cluster VS single instance - different results

Seth Hall seth at corelight.com
Sun Jul 23 12:58:10 PDT 2017


On Sun, Jul 23, 2017 at 9:31 AM william de ping <bill.de.ping at gmail.com>
wrote:

> The issue is that a single bro instance produces relevant logs upon
> listening to interface eth0.
> Yet broctl configured with a single worker that is listening to the same
> interface, running the same scripts, fail to produce relevant log files.
>

Hm, I'm not sure what could be causing that.  Could you show the output of
"ps auwwxf" while you have it running with broctl?

  .Seth

-- 
Seth Hall * Corelight, Inc * seth at corelight.com * www.corelight.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170723/e3e929a4/attachment.html 


More information about the Bro mailing list