[Bro] broctl print capture_filters failing

Daniel Thayer dnthayer at illinois.edu
Wed Apr 11 14:05:57 PDT 2018


On 4/11/18 2:58 PM, Perry, David wrote:
> I have a two-worker cluster running on an Ubuntu VM.  Bro was installed 
> from the packages provided by OpenSUSE.
> Ubuntu 16.04.4 LTS
> Bro 2.5.3
> BroControl Version 1.7.
> 
> Aside from commenting out most "@load protocols/xxx" lines, I have made 
> minimal changes to the configuration.
> 
> I am debugging capture filters but unfortunately broctl 
> print capture_filters throws an error.  'broctl status' works fine.
> 
> broctl status
> Name         Type    Host             Status    Pid    Started
> manager      manager localhost        running   11704  10 Apr 15:09:24
> proxy-1      proxy   localhost        running   11880  10 Apr 15:09:25
> worker-1     worker  localhost        running   11937  10 Apr 15:09:27
> worker-2     worker  localhost        running   11938  10 Apr 15:09:27
> 
> broctl print capture_filters
>       manager   <error: cannot connect to 127.0.0.1:47761>
>       proxy-1   <error: cannot connect to 127.0.0.1:47762>
>      worker-1   <error: cannot connect to 127.0.0.1:47763>
>      worker-2   <error: cannot connect to 127.0.0.1:47764>
> 

Have you verified that Bro is listening on those ports?
(e.g. "netstat -ltn")


More information about the Bro mailing list