Bro continually crashes

711 views
Skip to first unread message

Tony Carter

unread,
Feb 13, 2014, 9:25:55 PM2/13/14
to securit...@googlegroups.com
Bro keeps crashing after restart. How do I resolve this?

broctl restart
stopping ...
so1-eth2-1 not running
proxy not running
warning: cannot send mail
manager not running (was crashed)
starting ...
starting manager ...
manager terminated immediately after starting; check output with "diag"

The only error I see from broctl diag is:

==== stderr.log
fatal error in /opt/bro/share/bro/policy/frameworks/software/vulnerable.bro, line 41: BroType::AsRecordType (table/record) (set[record { min:record { major:count; minor:count; minor2:count; minor3:count; addl:string; }; max:record { major:count; minor:count; minor2:count; minor3:count; addl:string; }; }])

Thanks,
Tony

Doug Burks

unread,
Feb 14, 2014, 7:07:56 AM2/14/14
to securit...@googlegroups.com
Hi Tony,

Have you installed all updates?

Have you tried "sudo broctl install" to update the Bro config?

Have you made any changes to your Bro config?
> --
> You received this message because you are subscribed to the Google Groups "security-onion" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.
> To post to this group, send email to securit...@googlegroups.com.
> Visit this group at http://groups.google.com/group/security-onion.
> For more options, visit https://groups.google.com/groups/opt_out.



--
Doug Burks

Tony Carter

unread,
Feb 16, 2014, 11:26:45 AM2/16/14
to securit...@googlegroups.com
I did install updates and have not made any changes to Bro but "sudo broctl install" seemed to fix the problem.

Thanks,
Tony

Reply all
Reply to author
Forward
0 new messages