[Bro] Endace support in use?

Robin Sommer robin at icir.org
Mon Oct 18 12:33:06 PDT 2010

Bro currently comes with native support for Endace cards (i.e.,
using the Endace API directly, not via their libpcap-compatible

The support is enabled by configuring with --with-dag. As we're
cleaning up the Bro distribution, we were wondering if anybody is
using this functionality and would object seeing it removed?


Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org

More information about the Bro mailing list