[Bro] Worker System Memory Exhaustion

Greg Grasmehr greg.grasmehr at caltech.edu
Wed Apr 11 10:47:20 PDT 2018


Hi Aashish,

Have been using scan-NG, seems to be working though I'm curious, why do
you redefine local networks in scan-NG/debug.bro - wouldn't scan-NG pick
up that information from /usr/local/bro/etc/networks.cfg?

Also in regards to debugging, will it tell me if a path can't be found?
I was unsure of the reference
/feeds/BRO-feeds/LBL-subnets.csv-LATEST_BRO in the scan-config.bro - is
that in fact $BRO_PATH/feeds/BRO-feeds/LBL-subnets.csv-LATEST_BRO

Greg


More information about the Bro mailing list