# Running Bro on Mac OS X 10.8.5

**URL:** <https://community.zeek.org/t/running-bro-on-mac-os-x-10-8-5/2970>\
**Category:** Zeek\
**Created:** [January 21, 2014, 5:59pm UTC](https://community.zeek.org/t/running-bro-on-mac-os-x-10-8-5/2970 "2014-01-21T17:59:46Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Arthur\_Wong](https://avatars.discourse-cdn.com/v4/letter/a/5e9695/32.png) [@Arthur\_Wong](https://community.zeek.org/u/Arthur_Wong)\
**Post date:** [January 21, 2014, 5:59pm UTC](https://community.zeek.org/t/running-bro-on-mac-os-x-10-8-5/2970/1 "2014-01-21T17:59:46Z")

</div>

Hello All,

I downloaded Bro ( .dmg, full ) from [Bro.org](http://Bro.org) and installed it.

I do not recall having any issue with the install.

I wanted to have Bro read in a pcap file and the resulted in:

/opt/bro/bin/bro -r myidftraffic.pcap  
internal error: can’t load magic file : no magic files loaded  
Abort trap: 6

How do I correct this error?

Thanks in advance.

Art

---

<div class="post-metadata">

**Author:** ![Siwek\_Jon](https://avatars.discourse-cdn.com/v4/letter/s/90db22/32.png) [@Siwek\_Jon](https://community.zeek.org/u/Siwek_Jon)\
**Post date:** [January 21, 2014, 6:21pm UTC](https://community.zeek.org/t/running-bro-on-mac-os-x-10-8-5/2970/2 "2014-01-21T18:21:33Z")

</div>

> I downloaded Bro ( .dmg, full ) from Bro.org and installed it.
> 
> /opt/bro/bin/bro -r myidftraffic.pcap  
> internal error: can't load magic file \<default\>: no magic files loaded  
> Abort trap: 6
> 
> How do I correct this error?

I suggest building from sources instead.

> From [1]:

"Mac OS X packages are currently for Mavericks (10.9) only and the Bro packages also require libmagic to be installed — using the version from MacPorts should work, while other versions require setting the MAGIC environment variable to the path of the installed libmagic’s magic database file before running Bro."

- Jon

[1] [http://bro.org/download/index.html#binarypackages](http://bro.org/download/index.html#binarypackages)

---

<div class="post-metadata">

**Author:** ![Siwek\_Jon](https://avatars.discourse-cdn.com/v4/letter/s/90db22/32.png) [@Siwek\_Jon](https://community.zeek.org/u/Siwek_Jon)\
**Post date:** [January 21, 2014, 6:39pm UTC](https://community.zeek.org/t/running-bro-on-mac-os-x-10-8-5/2970/3 "2014-01-21T18:39:43Z")

</div>

Or if you prefer, 2.2 is available via MacPorts or Homebrew.

- Jon

---

<div class="post-metadata">

**Author:** ![Arthur\_Wong](https://avatars.discourse-cdn.com/v4/letter/a/5e9695/32.png) [@Arthur\_Wong](https://community.zeek.org/u/Arthur_Wong)\
**Post date:** [January 27, 2014, 7:43pm UTC](https://community.zeek.org/t/running-bro-on-mac-os-x-10-8-5/2970/4 "2014-01-27T19:43:10Z")

</div>

Thanks Jon.

Since the .dmg are for 10.9, I attempted install Bro on 10.9 and still got same error.

I installed MacPorts, then install libmagic, and then install the Bro Mac package.

It is possible that I am not installing one of these correctly.

To run Bro, I ended up setting the MAGIC environment variable:

export MAGIC=/opt/local/share/misc/magic.mgc

I did this from the terminal, but is there a config file that this can be put into so I don’t have to remember to set MAGIC variable every time use Bro?

Thanks - Art

---

<div class="post-metadata">

**Author:** ![Siwek\_Jon](https://avatars.discourse-cdn.com/v4/letter/s/90db22/32.png) [@Siwek\_Jon](https://community.zeek.org/u/Siwek_Jon)\
**Post date:** [January 27, 2014, 8:14pm UTC](https://community.zeek.org/t/running-bro-on-mac-os-x-10-8-5/2970/5 "2014-01-27T20:14:39Z")

</div>

> Since the .dmg are for 10.9, I attempted install Bro on 10.9 and still got same error.

Yeah, it’s a problem with Bro's binary OS X packaging, sorry about that.

> To run Bro, I ended up setting the MAGIC environment variable:  
> export MAGIC=/opt/local/share/misc/magic.mgc
> 
> I did this from the terminal, but is there a config file that this can be put into so I don't have to remember to set MAGIC variable every time use Bro?

There’s not a Bro-specific config file you can put that in, but you could probably put it in your ~/.profile.

Since you’ve got MacPorts already, you might try to install bro through that instead of use the binary package from bro.org. The MacPorts Bro package shouldn’t require setting any extra environment vars.

- Jon

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:41pm UTC](https://community.zeek.org/t/running-bro-on-mac-os-x-10-8-5/2970/6 "2022-05-06T15:41:30Z")

</div>


