[root@localhost scripts]# ./bro_config Automode not enabled Running Bro Configuration Utility Configure settings in bro.cfg? (YES/no) [YES] Values enclosed in '[ ]'s are the default value set if you hit return. **** Detected previous bro.cfg file ***** May I use /usr/local/bro/etc/bro.cfg for defaults? [Y/n]Y Sourcing /usr/local/bro/etc/bro.cfg for defaults. Log archive directory [/usr/local/bro/archive] User id to install and run Bro under [root] Interface name to listen on. The default is to use the busiest one found. [eth0] Site name for reports (i.e. LBNL, FOO.COM, BAZ.ORG) [eth0] Starting time for a report run (0001 is 12:01 am and 1201 is 12:01pm) [0000] How often (in hours) to generate an activity report [24] Email reports? (YES/no) [YES] Email address for local reports to be mailed to [NO] Do you want to encrypt email reports (YES/NO) [NO] error: "net.core.rmem_max" must be of the form name=value error: Malformed setting "=" error: "16777216" must be of the form name=value ERROR: Can't change value, entry exists in /etc/sysctl.conf! May I guess your network configuration for you? [YES] Checking network Running localnets script to determine the local network range ... This will take about 20 seconds Capturing packets .... done. Analyzing dump file.....cannot execute ./adtrace/adtrace /tmp/bro_config.tcpdump.file.29010: そのようなファイルやディレクトリはありません done. grep: local.site.bro: そのようなファイルやディレクトリはありません ./bro_config: line 462: [: : integer expression expected Your network appears to contain the following networks: grep: local.site.bro: そのようなファイルやディレクトリはありません Edit local.site.bro by hand if this is not correct Bro Configuration Finished. Press any key to now to continue. You have new mail in /var/spool/mail/root [root@localhost scripts]#