# Some broct cron errors

**URL:** <https://community.zeek.org/t/some-broct-cron-errors/4799>\
**Category:** Zeek\
**Created:** [April 24, 2017, 2:54pm UTC](https://community.zeek.org/t/some-broct-cron-errors/4799 "2017-04-24T14:54:53Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![C\_L\_Martinez](https://avatars.discourse-cdn.com/v4/letter/c/e274bd/32.png) [@C\_L\_Martinez](https://community.zeek.org/u/C_L_Martinez)\
**Post date:** [April 24, 2017, 2:54pm UTC](https://community.zeek.org/t/some-broct-cron-errors/4799/1 "2017-04-24T14:54:53Z")

</div>

Hi all,

In my Bro manager, under stats.log file I see the following errors:

1493044804.42 worker-2 parent vsize 104857600  
1493044804.42 worker-2 parent cmd bro  
1493044804.42 worker-2 parent pid 12753  
1493044804.42 worker-2 parent cpu 0  
1493044804.42 worker-2 parent rss 102760448  
1493044804.42 worker-2 child vsize 91226112  
1493044804.42 worker-2 child cmd bro  
1493044804.42 worker-2 child pid 53186  
1493044804.42 worker-2 child cpu 0  
1493044804.42 worker-2 child rss 3702784  
1493044804.42 worker-2 error error worker-2: capstats failed (error: 'vio0 -i vio2 -i vio3 -i vio4 -i vio7': No such device exists (BIOCSETIF failed: Device not configured))  
1493044804.42 worker-1 error error worker-1: capstats failed (error: 'vio0 -i vio2 -i vio3 -i vio4 -i vio7': No such device exists (BIOCSETIF failed: Device not configured))

I have configured two worker nodes listening in several network interfaces. Executing broctl netstats doesn't return any error:

root@brmgr01:/nsm/bro/logs/stats# broctl netstats  
&nbsp;&nbsp;&nbsp;worker-1: 1493045533.403342 recvd=754293 dropped=0 link=754293  
&nbsp;&nbsp;&nbsp;worker-2: 1493045532.906071 recvd=685795 dropped=0 link=685795

I think the problem is with my worker's sections under node.cfg:

[worker-1]  
type=worker  
host=172.22.59.2  
interface='vio0 -i vio2 -i vio3 -i vio4 -i vio7'

[worker-2]  
type=worker  
host=172.22.59.3  
interface='vio0 -i vio2 -i vio3 -i vio4 -i vio7'

What am I doing wrong?

Bro is 2.5 release ...

Thanks

---

<div class="post-metadata">

**Author:** ![Daniel\_Thayer](https://avatars.discourse-cdn.com/v4/letter/d/8dc957/32.png) [@Daniel\_Thayer](https://community.zeek.org/u/Daniel_Thayer)\
**Post date:** [April 24, 2017, 4:53pm UTC](https://community.zeek.org/t/some-broct-cron-errors/4799/2 "2017-04-24T16:53:00Z")

</div>

Capstats does not take multiple interface arguments. If you try  
to give it multiple interface arguments, it will just use the last  
one. For example, these two commands are equivalent:  
capstats -i vio0 -i vio2  
capstats -i vio2

The error message you're seeing is because the quotes  
in your node.cfg are being passed directly to the  
capstats command (so capstats thinks the interface  
name is 'vio0 -i vio2 ...').

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:44pm UTC](https://community.zeek.org/t/some-broct-cron-errors/4799/3 "2022-05-06T15:44:52Z")

</div>


