[Bro] Pcap Buffer = 0

Justin Azoff JAzoff at uamail.albany.edu
Thu Jun 16 10:02:07 PDT 2011

On Thu, Jun 16, 2011 at 12:26:24PM -0400, Chuck Little wrote:
> I have a fresh Bro-IDS install (ver 1.5.3), but I'm not really capturing
> traffic. I know I'm missing something (config setting, etc) but am
> unsure what it is. I consulted teh Google but didn't have much luck.
> Could someone provide some insight/advice? Thanks!
> -Chuck

Does broctl capstats show your interfaces receiving packets?

-- Justin Azoff
-- Network Security & Performance Analyst

More information about the Bro mailing list