[Bro] Endace support in use?
mcholste at gmail.com
Tue Nov 2 16:56:40 PDT 2010
We have an Endace card and I would like to give Bro a shot on it at
some point in the future.
On Tue, Nov 2, 2010 at 6:02 PM, Jason Ish <ish at unx.ca> wrote:
> On Mon, Oct 18, 2010 at 1:33 PM, Robin Sommer <robin at icir.org> wrote:
>> Bro currently comes with native support for Endace cards (i.e.,
>> using the Endace API directly, not via their libpcap-compatible
>> The support is enabled by configuring with --with-dag. As we're
>> cleaning up the Bro distribution, we were wondering if anybody is
>> using this functionality and would object seeing it removed?
> Hi Robin,
> I'm posting this on behalf of the Endace CEO, Stuart Wilson as he is
> not a member of this list and is unable to post. Note that I also
> work for Endace, but am subscribed here with my personal address:
> Hi Robin.
> We’re seeing need from the Government space to retain this, and of
> course we’d like to see it retained as well.
> We’re happy to put some work to maintain it if you can leave it in
> please. Updating to the latest drivers etc. might be useful.
> Stuart Wilson
> Bro mailing list
> bro at bro-ids.org
More information about the Bro