bro manager crash

[sech...@gmail.com]

hi
just install SecurityOnipn
i notice that bro is not working , when i try to start it i'm getting this error:

so@so-virtual-machine:$ sudo nsm_sensor_ps-start --only-bro
Starting: Bro
removing old policies in /nsm/bro/spool/installed-scripts-do-not-touch/site ...
removing old policies in /nsm/bro/spool/installed-scripts-do-not-touch/auto ...
creating policy directories ...
installing site policies ...
generating cluster-layout.bro ...
generating local-networks.bro ...
generating broctl-config.bro ...
generating broctl-config.sh ...
updating nodes ...
Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found
starting manager (was crashed) ...
manager terminated immediately after starting; check output with "diag"

i have 2 server

master
sensor

what i'm doing wrong ?

[Wes]

Have you installed all updates?

Have you tried the following to help identify the issue?

"sudo broctl diag"

Have you tried "sudo broctl install" to update the Bro config?

Have you made any changes to your Bro config?

https://groups.google.com/d/msg/security-onion/pC28ASIl79o/d0gzEFgBCygJ

Thanks,
Wes

[sech...@gmail.com]

hi

sudo broctl diag - show problem in config local netorks - fix it and it's working - thanks!

btw - what updates do you mean? i installed Security Onion 14.04 ISO image

[sech...@gmail.com]

On Tuesday, October 25, 2016 at 7:22:03 PM UTC+3, Wes wrote:

hi

after restat the problem return , it's always bring back the bad configuration for the local network , why is that ? how can i change it so it will be persistence ?

[Wes]

What configuration change did you make previously (specifically, what file)?

Thanks,
Wes