[Bro] Bro and PF_RING Cluster ID
rrotsted at pdx.edu
Tue Jul 31 15:36:28 PDT 2012
I'm running a clustered Bro instance with workers capturing traffic on
three PF_RING enabled e1000e interfaces.
While looking in /proc/net/pf_ring/ I noticed that all of my Bro
workers belong to cluster id 21. Is it possible (or desirable) in Bro
to create a PF_RING cluster id per capture interface?
I read that PF_RING allows a maximum of eight workers per cluster id,
is this still true?
More information about the Bro