What does it means this alert?

Zeek
1

Hi all,

I have installed bro-ids components on a CentOS 6.3 host. All works
as expected but from time to time I am receiving alerts like this:

nice: which:: No such file or directory

2

It seems that the alert is triggered when bro rotates logs ... Is it
possible to avoid this alert??

3

Haven’t delved into this, but it appears to be a path problem - is the ‘which’ command in the path?

4

Yes, it is under /usr/bin.

5

I think the problem is the nice command. Is that in your path?

.Seth

6

Sorry for the delayed response. I've been out of the office until today.

Yes, nice is in my path:

[root@nsm01 spool]# whereis nice
nice: /bin/nice /usr/share/man/man1/nice.1.gz

But the problem is with "time" command, as Chuck says in another thread:

http://mailman.icsi.berkeley.edu/pipermail/bro/2012-October/005962.html

In my broctl-config.sh appears this:

bindir="/nsm/bro/bin"
time="which: no time in
(/usr/local/bin:/bin:/usr/bin:/usr/local/sbin:/usr/sbin:/sbin)"

I have changed to:

time="/usr/bin/time"

So far the message has not been repeated.