21 Feb
2013
21 Feb
'13
1:54 p.m.
On Feb 21, 2013, at 4:47 PM, Chris Crawford <christopher.p.crawford(a)gmail.com>
wrote:
Is there another way to load the listen script?
Oh, I think it's because you're reading a packet capture. When reading packets
from a file you can't enable the communication framework.
Just try taking out the -r argument. You should be able to just put
frameworks/communication/listen on the command line too instead of the full file path.
Also, Bro won't terminate until you kill it.
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/