[Bro] napatech nt4e-4t

Seth Hall seth at icir.org
Mon Mar 4 06:15:45 PST 2013

On Mar 1, 2013, at 12:56 PM, Ghost Pepper <ghostpepper007 at gmail.com> wrote:

> Does anyone know if bro-ids capturing from a napatech card is known not to work?
> I've successfully compiled against the napatech provided libpcap, and ldd shows linkage to
> /opt/napatech3/lib/{ libpcap.so.1, libntapi.so, libntos.so }

I've never heard that anyone has tried.  Does their libpcap wrapper support the nonblocking functionality in libpcap?  There are relatively few applications that use libpcap in nonblocking mode so it's certainly possible that they haven't implemented it.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list