Hi
I went to look at the files.log today, I can’t see the bro directory
xxxxxxx@xxxxxxx:/etc/nsm$ ls
administration.conf essorgso-eth2 pulledpork securityonion sensortab templates
xxxxxx-eth1 ossec rules securityonion.conf servertab
xxxxxxx@xxxxxxxx:/etc/nsm$ cd bro
-bash: cd: bro: No such file or directory
xxxxxx@xxxxxxx:/etc/nsm$
But I can see the data is there:
xxxxxxx@xxxxxxxx:~$ sudo ls -lah /nsm/bro
total 44K
drwxr-xr-x 5 root root 4.0K Sep 4 2013 .
drwxr-xr-x 6 root root 4.0K May 16 21:10 …
drwxr-xr-x 2 root root 28K May 21 22:22 extracted
drwxr-xr-x 9 root root 4.0K May 21 22:03 logs
drwxr-xr-x 22 root root 4.0K May 21 22:20 spool
xxxxxxxx@xxxxxxxxxxx:~$ sudo ls -lah /nsm/bro/logs
total 228K
drwxr-xr-x 9 root root 4.0K May 21 22:03 .
drwxr-xr-x 5 root root 4.0K Sep 4 2013 …
drwxr-xr-x 2 root root 20K May 17 00:00 2014-05-16
drwxr-xr-x 2 root root 36K May 18 00:00 2014-05-17
drwxr-xr-x 2 root root 40K May 19 00:00 2014-05-18
drwxr-xr-x 2 root root 40K May 20 00:00 2014-05-19
drwxr-xr-x 2 root root 36K May 21 21:34 2014-05-20
drwxr-xr-x 2 root root 36K May 21 22:03 2014-05-21
lrwxrwxrwx 1 root root 22 May 21 22:03 current → /nsm/bro/spool/manager
drwxr-xr-x 3 root root 4.0K May 16 21:10 stats
I’ve stopped bro, did broctl check, then install and then start with no errors.
Anyone have any ideas? I haven’t messed with permissions, but it definitely seems to be a permission issue.
Thanks
Damon