sneakymonk3y / foxhound-nsm

Foxhound: Blackbox - A Raspberry Pi NSM
36 stars 14 forks source link

broctl check hangs #5

Open gebhard73 opened 6 years ago

gebhard73 commented 6 years ago

from time to time the command broctl check hangs (which is executed by cron job /nsm/scripts/update):

root@foxhound:~# broctl status
waiting for lock (owned by PID 30426) ...
^Croot@foxhound:~# ps -ef | grep 30426
root     30215 30074  0 19:25 pts/0    00:00:00 grep 30426
root     30426 30398  0 Jan02 ?        00:00:00 /usr/bin/python /usr/bin/broctl check
root     30435 30426  0 Jan02 ?        00:00:00 /bin/sh -c /usr/share/broctl/scripts/check-config 0 0 /var/spool/bro/tmp/check-config-bro -U .status -p broctl -p standalone -p local -p bro local.bro broctl broctl/standalone broctl/auto broctl/check

This is a known bug: https://bro-tracker.atlassian.net/browse/BIT-1802

Workaround as follows:

cp -p -i /usr/share/broctl/scripts/check-config /usr/share/broctl/scripts/check-config.orig
...
diff /usr/share/broctl/scripts/check-config /usr/share/broctl/scripts/check-config.orig
48c48
< "${bro}" -a "$@"
---
> "${bro}" "$@"

This should be fixed in one of the next bro releases available as Debian package.

Suggestion: keep this issue open till then

Version information:

root@foxhound:~# dpkg --list  | grep bro
ii  bro                              2.5-1                        armhf        passive network traffic analyzer
ii  bro-aux                          0.38-1                       armhf        small auxiliary tools for Bro
ii  bro-common                       2.5-1                        all          passive network traffic analyzer -- architecture-independent parts
ii  broctl                           1.4-1                        all          interactive shell for managing Bro installations