# Penguins think broccoli is OK **URL:** \ **Category:** Zeek\ **Created:** [July 26, 2005, 10:28pm UTC](https://community.zeek.org/t/penguins-think-broccoli-is-ok/821 "2005-07-26T22:28:33Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Mike\_Muratet](https://avatars.discourse-cdn.com/v4/letter/m/eb9ed0/32.png) [@Mike\_Muratet](https://community.zeek.org/u/Mike_Muratet)\ **Post date:** [July 26, 2005, 10:28pm UTC](https://community.zeek.org/t/penguins-think-broccoli-is-ok/821/1 "2005-07-26T22:28:33Z")
Christian I just ran your latest broccoli snapshot from a Linux box connecting to the bro peer on the FreeBSD box and got it to handshake. Cool. It must have been the Linux all along. bro works right out of the box on FreeBSD. I'll keep an eye on the cache issue. Cheers Mike ---
**Author:** ![Christian\_Kreibich3](https://avatars.discourse-cdn.com/v4/letter/c/4af34b/32.png) [@Christian\_Kreibich3](https://community.zeek.org/u/Christian_Kreibich3)\ **Post date:** [July 26, 2005, 11:54pm UTC](https://community.zeek.org/t/penguins-think-broccoli-is-ok/821/2 "2005-07-26T23:54:02Z")
Glad to hear! 🙂 So do I get this right: as soon as you moved Bro to a BSD host, things started to work? That's great but I'm puzzled as to why that would be the case ... Cheers, Christian. ---
**Author:** ![Mike\_Muratet](https://avatars.discourse-cdn.com/v4/letter/m/eb9ed0/32.png) [@Mike\_Muratet](https://community.zeek.org/u/Mike_Muratet)\ **Post date:** [July 27, 2005, 1:43pm UTC](https://community.zeek.org/t/penguins-think-broccoli-is-ok/821/3 "2005-07-27T13:43:56Z")
Christian > > I just ran your latest broccoli snapshot from a Linux box connecting to the > > bro peer on the FreeBSD box and got it to handshake. Cool. It must have been > > the Linux all along. bro works right out of the box on FreeBSD. I'll keep an > > eye on the cache issue. > > Glad to hear! 🙂 > > So do I get this right: as soon as you moved Bro to a BSD host, things > started to work? That's great but I'm puzzled as to why that would be > the case ... Yes. You'd think that at that level the operating systems should meet the same requirements, but they don't. If I had the resources, I'd try to figure out why, but I'm behind as it is. Mike ---
**Author:** ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)\ **Post date:** [July 27, 2005, 2:25pm UTC](https://community.zeek.org/t/penguins-think-broccoli-is-ok/821/4 "2005-07-27T14:25:29Z")
> Yes. You'd think that at that level the operating systems should meet the > same requirements, but they don't. Interesting. FWIW, I am using the communication code on both Linux and FreeBSD systems, and haven't encountered such problems yet. > If I had the resources, I'd try to figure > out why, but I'm behind as it is. Sure. Just in case you find any indication what may be going on, please let us know. Robin ---
**Author:** ![Mike\_Muratet](https://avatars.discourse-cdn.com/v4/letter/m/eb9ed0/32.png) [@Mike\_Muratet](https://community.zeek.org/u/Mike_Muratet)\ **Post date:** [July 27, 2005, 2:37pm UTC](https://community.zeek.org/t/penguins-think-broccoli-is-ok/821/5 "2005-07-27T14:37:22Z")
Robin > > Yes. You'd think that at that level the operating systems should meet the > > same requirements, but they don't. > > Interesting. FWIW, I am using the communication code on both Linux > and FreeBSD systems, and haven't encountered such problems yet. > > > If I had the resources, I'd try to figure > > out why, but I'm behind as it is. > > Sure. Just in case you find any indication what may be going on, > please let us know. I will. Which Linux are you using? I believe that there is an extra layer in Red Hat Linux as in the iptables function (at least that's what I've been told) that gives it a built-in firewall. I have had problems with ssh/ftp/etc on another system that required me to go in and make changes to the iptables. An earlier sysadmin had apparently gone in and enabled the firewall after a hack attempt. That's where I would (will) start looking. Cheers Mike ---
**Author:** ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)\ **Post date:** [July 27, 2005, 3:15pm UTC](https://community.zeek.org/t/penguins-think-broccoli-is-ok/821/6 "2005-07-27T15:15:39Z")
> I will. Which Linux are you using? I believe that there is an extra layer Primarily Debians running 2.6.x kernel; for development also SuSE systems. > in Red Hat Linux as in the iptables function (at least that's what I've That could indeed explain it. Per default, Bro/Brocolli use TCP ports 47756 (for SSL connections) and 47757 (for clear connections). If the firewall denies connections on these ports, the communication will not work. Sorry, I forgot: Do see anything in comm.log/remote.log which indicates that the connection can not be setup? Robin ---
**Author:** ![Christian\_Kreibich3](https://avatars.discourse-cdn.com/v4/letter/c/4af34b/32.png) [@Christian\_Kreibich3](https://community.zeek.org/u/Christian_Kreibich3)\ **Post date:** [July 27, 2005, 8:34pm UTC](https://community.zeek.org/t/penguins-think-broccoli-is-ok/821/7 "2005-07-27T20:34:08Z")
If permissible, "/etc/init.d/iptables stop" on the Linux box before the experiment might be a good idea, to see if anything changes ... Cheers, Christian. ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:37pm UTC](https://community.zeek.org/t/penguins-think-broccoli-is-ok/821/8 "2022-05-06T15:37:36Z")