[Bro] Interface bonding w/ Bro 1.5.1

William Jones jones at tacc.utexas.edu
Mon Apr 5 12:44:01 PDT 2010

Woops that would be:

interface="eth0 -i eth1"

Lower case i.

Bill Jones
-----Original Message-----
From: bro-bounces at ICSI.Berkeley.EDU [mailto:bro-bounces at ICSI.Berkeley.EDU] On Behalf Of Mike Weaver
Sent: Monday, April 05, 2010 1:45 PM
To: Bro at bro-ids.org
Subject: [Bro] Interface bonding w/ Bro 1.5.1


I'm in the process of upgrading from 1.4 to 1.5.1.  I have a splitter
feeding 2 NICs running on Ubuntu 8.04, eth0 & eth1.  With Bro 1.4 I could
specify interface="eth0 eth1" and set them up with no IP address.

This method does not seem to work w/ 1.5.1 so I started looking at ifenslave
and interface bonding.  This might work but requires an IP address to be
assigned to the bonded interface (bond0 in this case).

Any suggestions?  I can't find much in the way of applicable documentation.
I know that Ubuntu is not the development platform, but it fits into our
shop better than FreeBSD.



Mike Weaver
Office of Advanced Scientific Computing Research
US Department of Energy
T: 301-903-0072
F: 301-903-7774
weaver at ascr.doe.gov

Bro mailing list
bro at bro-ids.org

More information about the Bro mailing list