[Bro] BROKER + CLUSTER - stuck

Mike Dopheide dopheide at gmail.com
Wed Mar 8 07:11:15 PST 2017


For just the hanging issue...  Do you perhaps have
"exit_only_after_terminate" set in your policy for testing?  I've seen that
hang the config checker.

Dop

On Wed, Mar 8, 2017 at 4:24 AM william de ping <bill.de.ping at gmail.com>
wrote:

> Hello all,
>
> Short version : On bro2.5 I cannot seem to get the cluster working with a
> broker script. that same script is working on a single instance of bro.
>
> Detailed version :
>
> a.bro has a Broker listener linked to myevent. Once myevent is occurring,
> the string it received is added to a table named tb. On a pybroker remote
> machine I send updates to the listener.
>
> This scenario works with a single bro instance.
> However when I try to run broctl deploy, its stuck on "checking
> configurations ..."  and never finish executing.
> I do see 7 bro processes that are up (1 manager, 1 proxy + 4 workers).
>
> Any ideas on why is this occurring ?
>
> Also, if I state in a.bro that the Broker should listen to 9999/tcp, what
> happens in the case of a cluster ? do all instances try to bind to the same
> address+port ?
>
> How can I send one update from my pybroker script to several bro instances
> (workers) ?
>
> Thanks in advance
> B
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170308/3f5df439/attachment.html 


More information about the Bro mailing list