[Bro] Experiences with Bro and FreeBSD 8.2 Zerocopy BPF
robin at icir.org
Wed May 4 07:45:03 PDT 2011
On Tue, May 03, 2011 at 16:40 -0700, you wrote:
> like us, as they go forward in this direction. If anyone has any
> suggestions, etc. (particularly in going forward with solving this problem),
> I would appreciate it.
Just a quick thought: you could see if configuring with
--disable-select-loop makes a difference. That changes the pcap code
in Bro a bit (on FreeBSD actually not that much, but still worth a
If it did help, not sure what that would mean though: we have just
ripped out the alternative code path for Bro 1.6 ...
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro