However, when I start bro I get error: can't open drop.
That likely means that your drop script is not in its search path.
Vern
I used the full path to the script. I also made sure that it was
executable by the bro-user and that the logfile the script writes
to was writeable by the bro-user.
If I comment out the @load drop, bro starts up. However I don't
see any drop notifications.
jw
Well, its working now after restarting. The logfile
is showing drops. Note, this is with @load drop commented
out. I guess I should have restarted bro after changing
the permissions and ownership on the drop-script.
jw
John,
I used the full path to the script.
Where did you specify the full path to the script?
Thanks,
Ruoming