DNS

Zeek
1

I am trying to run bro on a Linux 2.2.14 intel box. If I try to use any
of the ".bro" file, I get this error :

hot, line 33: internal error: NB-DNS error in DNS_Mgr::WaitForReplies
Aborted

Could anyone help me to correct this?

The message means that a call to nb_dns_activity() (in nb_dns.c) is
failing. Unfortunately, this problem isn't familiar to me, so you'll have
to use a debugger to find out what's going on. I don't know how difficult
that will be.

    Vern

2

Vern Paxson wrote:

> I am trying to run bro on a Linux 2.2.14 intel box. If I try to use any
> of the ".bro" file, I get this error :
>
> hot, line 33: internal error: NB-DNS error in DNS_Mgr::WaitForReplies
> Aborted
>
> Could anyone help me to correct this?

The message means that a call to nb_dns_activity() (in nb_dns.c) is
failing. Unfortunately, this problem isn't familiar to me, so you'll have
to use a debugger to find out what's going on. I don't know how difficult
that will be.

                Vern

I have experienced a similar problem before when using bro on linux (Do
so at your own peril better to use *BSD). If the box your using it on is
a router and there is no internet connectivity. This happens because bro
needs to be able to resolve several host names present in the .bro files
(if there unmodified)
line 33 of hot calls for the resolution of ns.lbl.gov for instance. The
resolution to this is to customize the .bro files for your site, the
values in the .bro files are place holders (that was the intention
right?) so that you can change the value to something site specific.

On a somewhat related subject Mr. Paxon if you have finished the user
manual I would be very interested in seeing it.

Thanks,
Jonathan