help for bro

Zeek
1

hello all,

When i run bro without having the Internet connection it gives me some thing like this. Please tell me what changes should i make in order to remove this error. I am using bro 1.5 on suse 11.2.

The message i get are :
bro -r /usr/local/bro/090000-0-anon.pcap /usr/local/bro/share/bro/synflood.bro
/usr/local/bro/share/bro/drop.bro, line 67: internal error: NB-DNS error in DNS_Mgr::WaitForReplies (recvfrom(): Connection refused)
Aborted
linux-oxtm:~ # bro -r /usr/local/bro/090000-0-anon.pcap /usr/local/bro/share/bro/http.bro
/usr/local/bro/share/bro/drop.bro, line 67: internal error: NB-DNS error in DNS_Mgr::WaitForReplies (recvfrom(): Connection refused)
Aborted

2

Bro needs to be able to do DNS resolution. You can have it fake it internally though by setting the BRO_DNS_FAKE environment variable to anything. For example...

export BRO_DNS_FAKE=1

   .Seth