[Bro] Troubleshooting crashes
seth at icir.org
Mon Sep 17 18:10:36 PDT 2012
On Sep 17, 2012, at 8:18 PM, Tritium Cat <tritium.cat at gmail.com> wrote:
> I think the fix should be as easy as including another PF_RING environment variable when starting bro.
Oh! I didn't realize this was settable through an environment variable when using their libpcap wrappers. Do you happen to know the variable? That's something we definitely need to be setting, almost everyone with VLAN tagged traffic has trouble with the default PF_RING setting.
International Computer Science Institute
(Bro) because everyone has a network
More information about the Bro