[Bro] bro master crashing

Matt Clemons matt.clemons at gmail.com
Thu Mar 9 09:40:18 PST 2017


And I can't tell why.

One master.  26 worker systems.  Total of 200 worker processes.  All
centos6.  Bro 2.5.

Crashes just started happening last night.  System has been running since
the release of 2.5 with 0 issues.

Any way to tell why it's crashing?  So far, all i have is the email from
broctl and it's not very helpful.

---------
This crash report does not include a backtrace.  In order for crash reports
to be useful when Bro crashes, a backtrace is needed.



No core file found.



Bro 2.5

Linux 2.6.32-573.3.1.el6.x86_64



Bro plugins: (none found)



==== No reporter.log



==== stderr.log

received termination signal



==== stdout.log

max memory size         (kbytes, -m) unlimited

data seg size           (kbytes, -d) unlimited

virtual memory          (kbytes, -v) unlimited

core file size          (blocks, -c) unlimited



==== .cmdline

-U .status -p broctl -p broctl-live -p local -p SERVERNAME local.bro broctl
base/frameworks/cluster local-manager.bro broctl/auto



==== .env_vars

PATH=/opt/bro/bin:/opt/bro/share/broctl/scripts:/opt/bro/bin:/opt/rh/devtoolset-3/root/usr/bin:/opt/bro/bin:/sbin:/bin:/usr/sbin:/usr/bin

BROPATH=/data/bro/spool/installed-scripts-do-not-touch/site::/data/bro/spool/installed-scripts-do-not-touch/auto:/opt/bro/share/bro:/opt/bro/share/bro/policy:/opt/bro/share/bro/site

CLUSTER_NODE=SERVERNAME



==== .status

TERMINATED [atexit]



==== No prof.log



==== No packet_filter.log



==== No loaded_scripts.log

--

[Automatically generated.]
-- 
Regards,

Matt Clemons
(816) 200-0789
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170309/efabd069/attachment-0001.html 


More information about the Bro mailing list