[Bro] BROKER + CLUSTER - stuck (Mike Dopheide)

Azoff, Justin S jazoff at illinois.edu
Wed Mar 8 11:42:14 PST 2017


> On Mar 8, 2017, at 2:32 PM, fatema bannatwala <fatema.bannatwala at gmail.com> wrote:
> 
> Thanks Mike for clarification. Does it means I can use it and redef it in my local.bro ?
> I was thinking is there anyone else encountering same issues with deploy cmd, and
> if it can be added to Bro documentation on how to solve the hanging issue.
> Because thinking of it as a normal user perspective: I upgrade the Bro cluster to 2.5, and when use broctl deploy, it just hangs there, while user having no clue why it would happen.
> 
> Thanks,
> Fatema.

I used to see this issue on heavily overloaded clusters, but haven't been able to reproduce it in a while.  All check does is run a sc

One thing you could try is changing the check.bro script that comes with broctl to do

terminate();

instead of

terminate_communication();


I think Daniel also had a branch of broctl that just used bro -a instead of the check.bro script.

-- 
- Justin Azoff




More information about the Bro mailing list