[Bro] Endace support in use?

Jason Ish ish at unx.ca
Tue Nov 2 16:02:43 PDT 2010

On Mon, Oct 18, 2010 at 1:33 PM, Robin Sommer <robin at icir.org> wrote:
> Bro currently comes with native support for Endace cards (i.e.,
> using the Endace API directly, not via their libpcap-compatible
> interface).
> The support is enabled by configuring with --with-dag. As we're
> cleaning up the Bro distribution, we were wondering if anybody is
> using this functionality and would object seeing it removed?

Hi Robin,

I'm posting this on behalf of the Endace CEO, Stuart Wilson as he is
not a member of this list and is unable to post.  Note that I also
work for Endace, but am subscribed here with my personal address:

Hi Robin.

We’re seeing need from the Government space to retain this, and of
course we’d like to see it retained as well.

We’re happy to put some work to maintain it if you can leave it in
please.  Updating to the latest drivers etc. might be useful.

Stuart Wilson

More information about the Bro mailing list