Problems running Bro

Zeek
1

Sorry but when i try to read a file i recive the next output

root@lobito:/usr/local/bro/etc# /usr/local/bro/bin/bro -r segment190.pcap
line 1: error: can't open bro.init

root@lobito:/usr/local/bro/etc# netstat -natu -p
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:2208 0.0.0.0:* LISTEN 2317/hpiod
tcp 0 0 127.0.0.1:36942 0.0.0.0:* LISTEN 2320/python
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 2006/portmap
tcp 0 0 0.0.0.0:113 0.0.0.0:* LISTEN 2619/inetd
tcp 0 0 0.0.0.0:39636 0.0.0.0:* LISTEN 2709/rpc.statd
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 2433/cupsd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 2563/exim4
udp 0 0 0.0.0.0:32768 0.0.0.0:* 2507/avahi-daemon:
udp 0 0 0.0.0.0:32770 0.0.0.0:* 2709/rpc.statd
udp 0 0 192.168.150.134:32787 192.168.150.2:53 ESTABLISHED21988/bro
udp 0 0 0.0.0.0:68 0.0.0.0:* 3184/dhclient
udp 0 0 0.0.0.0:5353 0.0.0.0:* 2507/avahi-daemon:
udp 0 0 0.0.0.0:111 0.0.0.0:* 2006/portmap
udp 0 0 0.0.0.0:631 0.0.0.0:* 2433/cupsd
udp 0 0 0.0.0.0:765 0.0.0.0:* 2709/rpc.statd

Does anybody knows what im doing wrong? or i have to set and another option to read this file???

thanks

2

This error means that Bro cannot find the policy scripts. The environment variable $BROPATH should contain the path to your policy script directory and to all other custom directories that include policy script files:

% BRO_DIR="/path/to/bro"
% export BROPATH="${BRO_DIR}/policy:${BRO_DIR}/policy/local:${BRO_DIR}/policy/sigs"

     Matthias