Empty reports!!

Zeek
1

Thanks, but the reports didn't function correctly. I followed your tips.

I have another doubt, now it's about the notice email. How can I do to
configure to bro send to administrator an email in some critical situations?

Thanks
Angelita

2

Thanks, but the reports didn't function correctly. I followed your tips.

If you send us the output of the report script using debug level 2, maybe we can help
figure this out.

I have another doubt, now it's about the notice email. How can I do to
configure to bro send to administrator an email in some critical situations?

This section of the manual should answer your question:

http://www.bro-ids.org/Bro-user-manual/Notice-Actions.html

3

Brian,

I already tested whit debug level: 3, 4 and 5.

About the notice mail: I changed the notice.bro like the document says and
defined the mail_dest with my email address. But I didn't received any
notice mail . If I run the mail_notice.sh script I receive an email
correctly, but empty.

What can I do?

Thanks
Angelita

4

Brian,

I already tested whit debug level: 3, 4 and 5.

About the notice mail: I changed the notice.bro like the document says and
defined the mail_dest with my email address. But I didn't received any
notice mail . If I run the mail_notice.sh script I receive an email
correctly, but empty.

What can I do?

Thanks
Angelita