[Bro] My last issue I hope

Justin Azoff JAzoff at albany.edu
Thu Jun 20 08:05:10 PDT 2013

On Thu, Jun 20, 2013 at 09:50:12AM -0500, Richards, James L - DOA wrote:
> So everything is humming along with no errors, but also no events.
> In looking at pf_ring, specifically /proc/net/pf_ring, I am seeing that it does
> not appear to be capturing packets…

The simplest cause could be that you have an issue with the tap/span
port that is supposed to be feeding you traffic.  Is your sensor
definitely receiving traffic?  Are the ethernet links up?

-- Justin Azoff
-- Network Security & Performance Analyst

More information about the Bro mailing list