[Bro] Endace support in use?
robin at icir.org
Mon Oct 18 12:33:06 PDT 2010
Bro currently comes with native support for Endace cards (i.e.,
using the Endace API directly, not via their libpcap-compatible
The support is enabled by configuring with --with-dag. As we're
cleaning up the Bro distribution, we were wondering if anybody is
using this functionality and would object seeing it removed?
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro