Not generating reports

Zeek
1

My bro installation is logging correctly, but is not generating reports. I am not sure what I did wrong, or what to post here to try to get assistance with this issue.

Any suggestions?

TIA
David Caldwell

2

Did you do a 'make install-brolite' ? That is required to install the
report generation stuff. What happens when you run this:

/usr/local/bro/scripts/site-report.pl \
  --broconfig /usr/local/bro/etc/bro.cfg

David Caldwell wrote:

3

yes, I did do 'make install-brolite' and gave it the times and everything requested by the script.

If I run that command I get this

Can't locate Bro/Config.pm in @INC (@INC contains: /usr/local/bro/perl/lib/perl5/site_perl /etc/perl /usr/local/lib/perl/5.8.4 /usr/local/share/perl/5.8.4 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /usr/local/bro/scripts/site-report.pl line 25.
BEGIN failed--compilation aborted at /usr/local/bro/scripts/site-report.pl line 25.

Thanks,
David

4

Looks like something did not get fully installed.
Did you run 'make install-brolite' as root?

Can you re-run 'make install-brolite', and send me the output?

David Caldwell wrote:

5

I've just upgraded to bro 1.2.1, and I had to change
the perl path by hand after make install-brolite:

scripts/site-report.pl:
#use lib '/usr/local/bro/perl/lib/perl5/site_perl';
use lib '/usr/local/bro/perl/share/perl/5.8.4/';

it's a debian stable box.

regards.