[Zeek] Install Bro as a non-root user

[Merril Mathew]

Hi all,

Is there a way to install Bro as a non-root user? Everything works fine if
its installed as root but I had problems sending Bro logs to logstash as a
non-root user.

When I tried to install as a regular user with sudo privilege, I noticed
two errors mainly.

1) Error: unable to open database file: /usr/local/bro/spool/state.db
2) fatal error: /opt/bro/bin/bro: problem with interface eth0 -
pcap_open_live: eth0: You don't have permission to capture on that device
(socket: Operation not permitted)

Any idea where to go next for me?

Kind regards,
Merril.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190619/9713bc15/attachment.html