# What am I doing wrong here?

**URL:** <https://community.zeek.org/t/what-am-i-doing-wrong-here/1070>\
**Category:** Zeek\
**Created:** [November 29, 2006, 6:38pm UTC](https://community.zeek.org/t/what-am-i-doing-wrong-here/1070 "2006-11-29T18:38:05Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Philippe\_Strauss](https://avatars.discourse-cdn.com/v4/letter/p/ecc23a/32.png) [@Philippe\_Strauss](https://community.zeek.org/u/Philippe_Strauss)\
**Post date:** [November 29, 2006, 6:38pm UTC](https://community.zeek.org/t/what-am-i-doing-wrong-here/1070/1 "2006-11-29T18:38:05Z")

</div>

Yeap, on Linux systems you have to be root to  
open interfaces in promisc mode.

edit etc/bro.cfg like the following:

# User id to install and run Bro under  
BRO\_USER\_ID="root"

regards.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:38pm UTC](https://community.zeek.org/t/what-am-i-doing-wrong-here/1070/2 "2022-05-06T15:38:04Z")

</div>