[Bro] all broctl instances are running yet broctl status shows stopped
Daniel Thayer
dnthayer at illinois.edu
Tue Mar 20 07:19:20 PDT 2018
On 3/20/18 6:19 AM, william de ping wrote:
> Hi all,
>
> When running bro release 2.5 in cluster mode (manager,proxy and several
> workers) I have a strange issue :
> new logs are written to spool/manager and according to pgrep -c bro all
> instances are running, yet "broctl status" shows that all instances are
> stopped.
>
> For some reason about an hour after using the "broctl deploy", this
> issue occurs again.
>
> Any thoughts on what might cause this behavior ?
> I see no fix for this on newer versions.
>
> Thank you
> B
When this happens, what does the output of "broctl diag" look like?
More information about the Bro
mailing list