[Bro] cluster VS single instance - different results

Seth Hall seth at corelight.com
Sun Jul 23 12:58:10 PDT 2017

On Sun, Jul 23, 2017 at 9:31 AM william de ping <bill.de.ping at gmail.com>

> The issue is that a single bro instance produces relevant logs upon
> listening to interface eth0.
> Yet broctl configured with a single worker that is listening to the same
> interface, running the same scripts, fail to produce relevant log files.

Hm, I'm not sure what could be causing that.  Could you show the output of
"ps auwwxf" while you have it running with broctl?


Seth Hall * Corelight, Inc * seth at corelight.com * www.corelight.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170723/e3e929a4/attachment.html 

More information about the Bro mailing list