# BRO: the log files aren't the same every time

**URL:** <https://community.zeek.org/t/bro-the-log-files-arent-the-same-every-time/5268>\
**Category:** Zeek\
**Created:** [April 20, 2018, 8:54am UTC](https://community.zeek.org/t/bro-the-log-files-arent-the-same-every-time/5268 "2018-04-20T08:54:27Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![user3](https://avatars.discourse-cdn.com/v4/letter/u/ec9cab/32.png) [@user3](https://community.zeek.org/u/user3)\
**Post date:** [April 20, 2018, 8:54am UTC](https://community.zeek.org/t/bro-the-log-files-arent-the-same-every-time/5268/1 "2018-04-20T08:54:27Z")

</div>

Hi, everyone,  
I’ve been using BRO for a while, and there is a problem that is when i run BRO , the log files are not the same even if i do the same operation. Specifically, I run BRO at first time, I do some operation, and there is a log file let’s say 1.log (because i do the operation, it’s definitely generate this file), but when I then run BRO next time, and also do the same operation, there is no 1.log file. but after a few minutes, when I run it again, the 1.log file comes out! I just don’t understand why, this really confuses me, and I think if there is a cache or something.  
Can anybody help me?

Best Regards  
Sherry

---

<div class="post-metadata">

**Author:** ![Jon\_Siwek](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@Jon\_Siwek](https://community.zeek.org/u/Jon_Siwek)\
**Post date:** [April 23, 2018, 3:56pm UTC](https://community.zeek.org/t/bro-the-log-files-arent-the-same-every-time/5268/2 "2018-04-23T15:56:18Z")

</div>

It's generally hard to say what could be causing such a problem, are you able to give more details on what you're trying to do? Are you using any custom script that you can share? Or have an associated pcap file? Which Bro version and how are you running it?

- Jon

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:45pm UTC](https://community.zeek.org/t/bro-the-log-files-arent-the-same-every-time/5268/3 "2022-05-06T15:45:43Z")

</div>

Closed on May 6, 2022, 3:45pm UTC


