Re: Bro doctor fails

Justin Azoff <[email protected]>
Newsgroups gmane.comp.security.detection.bro
Message-ID <CAPfnCuiLyBrv6a742jx7r+H9RWYo2QzSNhAn28FjzH+yRXye+A@mail.gmail.com>
gah, looks like I need to change some 'bro's to 'zeek's to work with
master.  If you don't mind editing it real quick until I can get a new
release out, I think minimally changing this line:

        self.bro_binary = self.getGlobalOption("bro")

to

        self.bro_binary = self.getGlobalOption("zeek")

should get things working.

On Tue, Jun 25, 2019 at 8:57 AM Allen, Brian <[email protected]> wrote:
>
> I had bro doctor working, but then we had an issue/accident in the datacenter and I had to rebuild the manager from scratch.  I tried to follow my detailed notes from when I installed it the first time.  Now bro doctor isn't working, and I'm trying to figure out why.  Any suggestions?
>
> $ sudo ./zeekctl doctor.bro
>
> Warning: ZeekControl plugin uses legacy BroControl API. Use
> 'import ZeekControl.plugin' instead of 'import BroControl.plugin'
>
> Warning: Plugin 'doctor' not activated because its init() method raised exception: 'plugin doctor lookup of unknown config option bro'
> Error: unknown command 'doctor.bro'
>
> ZeekControl Version 1.9-49
>
> Thanks for your help,
> -Brian
>
>
> ________________________________
> The materials in this message are private and may contain Protected Healthcare Information or other information of a sensitive nature. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail.
>
> _______________________________________________
> Zeek mailing list
> [email protected]
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek



-- 
Justin

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.