Bro Silent Crash

Possibly a newb question, but “broctl status” is reporting bro is running, but broctl restart reportings taht bro was not running because it crashed. Why the discrepancy? Also, log/current/stderr.log & srdout.log do not contain any information regarding the crash. Is this crash info stored else where?


How's your syslog lookin?

Dec 19 14:09:26 gateway kernel: bro[16591]: segfault at 0 ip (null) sp 00007fffa051d1a8 error 14 in bro[400000+4e3000]