[Bro] Cluster setup
hiren.panchasara at gmail.com
Fri Nov 1 11:36:35 PDT 2013
On Fri, Nov 1, 2013 at 10:34 AM, Seth Hall <seth at icir.org> wrote:
> On Nov 1, 2013, at 11:36 AM, hiren panchasara <hiren.panchasara at gmail.com> wrote:
>>> Typically people run PF_Ring in mode 0 which is actually not exposing hardware load balanced traffic. It's collecting all of the traffic and load balancing it in the core.
>> Here, core == bro's core?
> Sorry, totally wrong word. I meant kernel. :)
Ah, okay. So instead of card, let kernel do all the load balancing
(probably with assistance from PF_RING).
More information about the Bro