# proxy crashing on Bro cluster **URL:** \ **Category:** Zeek\ **Created:** [June 4, 2014, 4:13pm UTC](https://community.zeek.org/t/proxy-crashing-on-bro-cluster/3136 "2014-06-04T16:13:56Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Matt\_Stucky](https://avatars.discourse-cdn.com/v4/letter/m/ee7513/32.png) [@Matt\_Stucky](https://community.zeek.org/u/Matt_Stucky)\ **Post date:** [June 4, 2014, 4:13pm UTC](https://community.zeek.org/t/proxy-crashing-on-bro-cluster/3136/1 "2014-06-04T16:13:56Z")
I’ve noticed on our bro cluster that the proxy keeps crashing and restarting. The cluster seems to be working, logs are being written, etc. Has anyone seen this behavior? What am I missing here? From the crash report: internal error: unknown msg type 115 in Poll() /opt/bro/share/broctl/scripts/run-bro: line 85: 18479 Aborted (core dumped) nohup $mybro “$@” It attempts to restart it, but the status always shows with ??? in the Peers column: proxy-1 proxy 1.2.3.4 running 12386 ??? 04 Jun 07:30:05 Thanks, matt ---
**Author:** ![Matt\_Stucky](https://avatars.discourse-cdn.com/v4/letter/m/ee7513/32.png) [@Matt\_Stucky](https://community.zeek.org/u/Matt_Stucky)\ **Post date:** [June 4, 2014, 4:49pm UTC](https://community.zeek.org/t/proxy-crashing-on-bro-cluster/3136/2 "2014-06-04T16:49:10Z")
This cluster has two hosts, one proxy, 12 workers, and sees 900+ mbps of traffic. Would it make more sense to have a proxy on each host? ---
**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\ **Post date:** [June 4, 2014, 7:59pm UTC](https://community.zeek.org/t/proxy-crashing-on-bro-cluster/3136/3 "2014-06-04T19:59:24Z")
This is communication system overload. One of the many reasons we've been planning to replace the communication infrastructure in Bro. Try adding another proxy to your cluster.   .Seth ---
**Author:** ![Matt\_Stucky](https://avatars.discourse-cdn.com/v4/letter/m/ee7513/32.png) [@Matt\_Stucky](https://community.zeek.org/u/Matt_Stucky)\ **Post date:** [June 4, 2014, 9:10pm UTC](https://community.zeek.org/t/proxy-crashing-on-bro-cluster/3136/4 "2014-06-04T21:10:48Z")
Updated the cluster to run a proxy on each host now, and so far so good, no crashes. Thanks, -matt ---
**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\ **Post date:** [June 4, 2014, 9:20pm UTC](https://community.zeek.org/t/proxy-crashing-on-bro-cluster/3136/5 "2014-06-04T21:20:54Z")
Cool, the general rule of thumb I've been giving people lately is somewhere around 14-15 workers per proxy.   .Seth ---
**Author:** ![Matt\_Stucky](https://avatars.discourse-cdn.com/v4/letter/m/ee7513/32.png) [@Matt\_Stucky](https://community.zeek.org/u/Matt_Stucky)\ **Post date:** [June 4, 2014, 9:27pm UTC](https://community.zeek.org/t/proxy-crashing-on-bro-cluster/3136/6 "2014-06-04T21:27:32Z")
Is that with a dedicated proxy? I now have manager, proxy, and six workers on one host; proxy and six workers on the other. ---
**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\ **Post date:** [June 4, 2014, 9:35pm UTC](https://community.zeek.org/t/proxy-crashing-on-bro-cluster/3136/7 "2014-06-04T21:35:46Z")
Ah, it could be a system resource issue causing trouble for you too.   .Seth ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:41pm UTC](https://community.zeek.org/t/proxy-crashing-on-bro-cluster/3136/8 "2022-05-06T15:41:49Z")