[Bro] Pcap Buffer = 0
JAzoff at uamail.albany.edu
Thu Jun 16 10:02:07 PDT 2011
On Thu, Jun 16, 2011 at 12:26:24PM -0400, Chuck Little wrote:
> I have a fresh Bro-IDS install (ver 1.5.3), but I'm not really capturing
> traffic. I know I'm missing something (config setting, etc) but am
> unsure what it is. I consulted teh Google but didn't have much luck.
> Could someone provide some insight/advice? Thanks!
Does broctl capstats show your interfaces receiving packets?
-- Justin Azoff
-- Network Security & Performance Analyst
More information about the Bro