Bro crashes regularly

Hello! I am experiencing an issue where bro regularly crashes. A crash
log is appended to this email. I am running a recent version of bro
checked out of GIT last week. The OS is FreeBSD 8.2 x64.

If there is no bug fix at this time, does anyone have a script that will
check if bro has crashed and will restart in broctl? If the workers have
crashed and I run 'check' in broctl it says that all workers and proxys
are OK, but then if i do 'restart' it says that they have crashed. This
might be another bug.

Any info / tips would be greatly appreciated.

Cheers,

Will

Hello! I am experiencing an issue where bro regularly crashes. A crash
log is appended to this email

We have a ticket filed for that bug and I expect a fix in the next day or two.

If there is no bug fix at this time, does anyone have a script that will
check if bro has crashed and will restart in broctl? If the workers have
crashed and I run 'check' in broctl it says that all workers and proxys
are OK, but then if i do 'restart' it says that they have crashed. This
might be another bug.

Oh sorry, BroControl should be managing this for you already. You just need to set a cron job that runs BroControl's "cron" command every 5 minutes or so. Here's what I usually use...

*/5 * * * * /bro/bin/broctl cron

You just need to adjust the path based on where you installed broctl obviously. :slight_smile: That will check to make sure everything is running and take care of a few other minor details as well.

  .Seth

There's a fix now in master that seems to fix it. Could you try?

Robin