[Zeek] Ports for workers

Justin Azoff justin at corelight.com
Thu Dec 5 06:43:57 PST 2019


It's explained here:

https://github.com/zeek/zeekctl/blob/master/doc/main.rst#zeek-communication

You can also see exactly what ports have been allocated if you look at

/usr/local/bro/spool/installed-scripts-do-not-touch/auto/cluster-layout.bro

On Thu, Dec 5, 2019 at 9:22 AM Scot Harris <SHARRIS at hollywoodfl.org> wrote:

> Have two machines, one running manager, logger, proxy, worker.
>
>
>
> Second machine running worker.
>
>
>
> Cluster appears to be working.
>
>
>
> However, some of the commands in zeekctl hang.  (peerstatus, netstats)
>
>
>
> Appears to be due to firewall on the second machine.  Disabling firewall
> the commands work as expected.
>
>
>
> What ports on the second machine need to be opened?
>
>
>
> I found ports for:
>
>
>
> Logger 47761
>
> Manager 47762
>
> Proxy 47763
>
>
>
> Thank you.
>
>
> __________________________________________
> *Scot Harris*
> Network Engineer
> City of Hollywood
> Information Technology
>
> P.O. Box 229045
> Hollywood, FL 33022-9045
> Office: 954-921-3304
> E-mail: SHARRIS at hollywoodfl.org
> [image: www.hollywoodfl.org]
> Notice: Florida has a broad public records law. All correspondence sent to
> the City of Hollywood via e-mail may be subject to disclosure as a matter
> of public record.
> __________________________________________
> _______________________________________________
> Zeek mailing list
> zeek at zeek.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek



-- 
Justin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20191205/4d46abd8/attachment-0001.html 


More information about the Zeek mailing list