Reg: bro.init file error (Very Urgent)

Zeek
1

Hello,

I was working with BRO IDS on my machine. By mistake I moved the Bro directory which is in /usr/local/Bro/share/Bro directory on the desktop of my machine. I moved again that Bro directory in /usr/local/Bro/Share/ directory. But now when I execute policy script it is showing error that “Can not open Bro.init”. Now I am not able to execute any policy scripts on the BRO IDS. Please, tell me how to recover from this error. Otherwise my two months work will be lost. Please,help me in this regard. Thanks in advance.

2

I'm guessing you are running something in the 1.5.x series of releases? All you should need to do is get a new copy of the release you are using and copy the scripts from policy/ to that directory.

  .Seth

3

I was working with BRO IDS on my machine. By mistake I moved the Bro directory which is in /usr/local/Bro/share/Bro directory on the desktop of my machine. I moved again that Bro directory in /usr/local/Bro/Share/ directory. But now when I execute policy script it is showing error that "Can not open Bro.init".

I'm not sure if it's just the way you're typing the paths, but it could be your casing -- the paths are usually all lowercase by default ("bro" vs. "Bro" and "share" vs. "Share").

And I think if you do a `bro --help` and look at the $BROPATH option, it should tell you the default search paths for scripts that you can compare to the current location to see what's wrong. If not, you can always try changing your BROPATH environment variable to point to where they currently are located.

+Jon