I just downloaded and configured timemachine (http://www.net.t-labs.tu-berlin.de/research/tm/#download) and am attempting to integrate it with Bro 1.5.1. Upon defining my timemachinehost in broctl.conf and restarting Bro it caused my timemachine process to abort with the following error:
*** Broccoli error: bro_conn_new_socket called without prior initialization.
*** Initialization of the Broccoli library is now required.
*** See documentation for details. Aborting.
I noticed the latest download of timemachine is from February of 2009. However Bro 1.5.1 is a lot newer than that. Is anyone running the newest Bro IDS with timemachine? If so what is the workaround or fix for the above error?
Unix Systems Engineer / Information Security Analyst
Office of the CIO - Information Systems (OCIO-IS)
Medical University of South Carolina