[Bro] all broctl instances are running yet broctl status shows stopped

william de ping bill.de.ping at gmail.com
Tue Mar 20 04:19:11 PDT 2018


Hi all,

When running bro release 2.5 in cluster mode (manager,proxy and several
workers) I have a strange issue :
new logs are written to spool/manager and according to pgrep -c bro all
instances are running, yet "broctl status" shows that all instances are
stopped.

For some reason about an hour after using the "broctl deploy", this issue
occurs again.

Any thoughts on what might cause this behavior ?
I see no fix for this on newer versions.

Thank you
B
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20180320/54ce90dd/attachment.html 


More information about the Bro mailing list