Re: Ports for workers

--===============1047344790==
Content-Type: multipart/alternative; boundary="000000000000afde9c0598f5f79a"

--000000000000afde9c0598f5f79a
Content-Type: text/plain; charset="UTF-8"

It's explained here:

https://github.com/zeek/zeekctl/blob/master/doc/main.rst#zeek-communication

You can also see exactly what ports have been allocated if you look at

/usr/local/bro/spool/installed-scripts-do-not-touch/auto/cluster-layout.bro

On Thu, Dec 5, 2019 at 9:22 AM Scot Harris <[email protected]> wrote:

> Have two machines, one running manager, logger, proxy, worker.
>
>
>
> Second machine running worker.
>
>
>
> Cluster appears to be working.
>
>
>
> However, some of the commands in zeekctl hang.  (peerstatus, netstats)
>
>
>
> Appears to be due to firewall on the second machine.  Disabling firewall
> the commands work as expected.
>
>
>
> What ports on the second machine need to be opened?
>
>
>
> I found ports for:
>
>
>
> Logger 47761
>
> Manager 47762
>
> Proxy 47763
>
>
>
> Thank you.
>
>
> __________________________________________
> *Scot Harris*
> Network Engineer
> City of Hollywood
> Information Technology
>
> P.O. Box 229045
> Hollywood, FL 33022-9045
> Office: 954-921-3304
> E-mail: [email protected]
> [image: www.hollywoodfl.org]
> Notice: Florida has a broad public records law. All correspondence sent to
> the City of Hollywood via e-mail may be subject to disclosure as a matter
> of public record.
> __________________________________________
> _______________________________________________
> Zeek mailing list
> [email protected]
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek



-- 
Justin

--000000000000afde9c0598f5f79a
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">It&#39;s explained here:<div><br></div><div><a href=3D"htt=
ps://github.com/zeek/zeekctl/blob/master/doc/main.rst#zeek-communication">h=
ttps://github.com/zeek/zeekctl/blob/master/doc/main.rst#zeek-communication<=
/a><br></div><div><br></div><div>You can also see exactly what ports have b=
een allocated if you look at=C2=A0</div><div><br></div><div>/usr/local/bro/=
spool/installed-scripts-do-not-touch/auto/cluster-layout.bro<br></div></div=
><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Th=
u, Dec 5, 2019 at 9:22 AM Scot Harris &lt;<a href=3D"mailto:SHARRIS@hollywo=
odfl.org">[email protected]</a>&gt; wrote:<br></div><blockquote class=
=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg=
b(204,204,204);padding-left:1ex">





<div lang=3D"EN-US">
<div class=3D"gmail-m_4516495687535092086WordSection1">
<p class=3D"MsoNormal">Have two machines, one running manager, logger, prox=
y, worker.<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal">Second machine running worker.<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal">Cluster appears to be working.<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal">However, some of the commands in zeekctl hang.=C2=A0=
 (peerstatus, netstats)<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal">Appears to be due to firewall on the second machine.=
=C2=A0 Disabling firewall the commands work as expected.<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal">What ports on the second machine need to be opened?<=
u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal">I found ports for:<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal">Logger 47761<u></u><u></u></p>
<p class=3D"MsoNormal">Manager 47762<u></u><u></u></p>
<p class=3D"MsoNormal">Proxy 47763<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal">Thank you.<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div style=3D"font-size:9pt">__________________________________________<br>
<i><b>Scot Harris</b></i><br>
Network Engineer<br>
City of Hollywood<br>
Information Technology<br>
<br>
P.O. Box 229045<br>
Hollywood, FL 33022-9045<br>
Office: 954-921-3304<br>
E-mail: <a href=3D"mailto:[email protected]" target=3D"_blank">SHARRI=
[email protected]</a><br>
<div><img alt=3D"www.hollywoodfl.org" src=3D"http://apps.hollywoodfl.org/im=
ages/coh_logo_color.png"></div>
Notice: Florida has a broad public records law. All correspondence sent to =
the City of Hollywood via e-mail may be subject to disclosure as a matter o=
f public record.<br>
__________________________________________</div>
</div>

_______________________________________________<br>
Zeek mailing list<br>
<a href=3D"mailto:[email protected]" target=3D"_blank">[email protected]</a><br>
<a href=3D"http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek" rel=3D"n=
oreferrer" target=3D"_blank">http://mailman.ICSI.Berkeley.EDU/mailman/listi=
nfo/zeek</a></blockquote></div><br clear=3D"all"><div><br></div>-- <br><div=
 dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"ltr">Justin</div></div>

--000000000000afde9c0598f5f79a--

--===============1047344790==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
--===============1047344790==--