Hi, I have a little question, I start bro : $ export BROPATH=/usr/src/bro/bro-pub-0.9a2/policy; $ /usr/src/bro/bro-pub-0.9a2/bro -i eth0 bro.init mt http ok bro not write on stdout ! when bro run, files log.log/http.log/ftp.log/alert.log/weird.log is zero but if I stop bro, only weird.log …

$ /usr/src/bro/bro-pub-0.9a2/bro -i eth0 bro.init mt http You should use "http-request" (and perhaps "http-reply") instead of http. and why bro write weird.log only after stop bro ? Most of the log files are buffered, i.e. output is written in larger chunks (and at termination). Robin

thanks for your help Robin Regards Rmkml@Wanadoo.fr

problems using Bro (http)

Zeek

Topic		Replies	Views
Bro log into MySQL Zeek	1	89	May 6, 2022
No log when bro script is run with broctl Zeek	3	99	May 6, 2022
about logs Zeek	1	79	May 6, 2022
Bro Script not working Zeek	1	97	May 6, 2022
configuration issues Zeek	4	92	May 6, 2022

problems using Bro (http)

Related topics