[Bro] cluster VS single instance - different results
Seth Hall
seth at corelight.com
Sun Jul 23 12:58:10 PDT 2017
On Sun, Jul 23, 2017 at 9:31 AM william de ping <bill.de.ping at gmail.com>
wrote:
> The issue is that a single bro instance produces relevant logs upon
> listening to interface eth0.
> Yet broctl configured with a single worker that is listening to the same
> interface, running the same scripts, fail to produce relevant log files.
>
Hm, I'm not sure what could be causing that. Could you show the output of
"ps auwwxf" while you have it running with broctl?
.Seth
--
Seth Hall * Corelight, Inc * seth at corelight.com * www.corelight.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170723/e3e929a4/attachment.html
More information about the Bro
mailing list