[Bro] all broctl instances are running yet broctl status shows stopped

[Daniel Thayer]

On 3/20/18 6:19 AM, william de ping wrote:
> Hi all,
> 
> When running bro release 2.5 in cluster mode (manager,proxy and several 
> workers) I have a strange issue :
> new logs are written to spool/manager and according to pgrep -c bro all 
> instances are running, yet "broctl status" shows that all instances are 
> stopped.
> 
> For some reason about an hour after using the "broctl deploy", this 
> issue occurs again.
> 
> Any thoughts on what might cause this behavior ?
> I see no fix for this on newer versions.
> 
> Thank you
> B


When this happens, what does the output of "broctl diag" look like?