[Bro] Compiling Bro with Endace Dag Support
mike.patterson at uwaterloo.ca
Mon Oct 28 15:50:17 PDT 2013
Can’t speak for what’s actually supported, but I’ve not been disappointed with using libpcap with DAG, bro vs that libpcap.
That said, use pcap 1.3.0. 1.4.0 had some issues, can’t recall their precise nature but “they don’t work at all” sticks in the mind. :)
On Oct 28, 2013, at 6:02 PM, Benjamin Wood <ben.bt.wood at gmail.com> wrote:
> Is this functionality still supported?
> I believe I've been able to get bro to use libpcap compiled with dag libraries, but is there native support?
> I remember reading somewhere that I could run "./configure --with-dag" to compile bro with dag support.
> If not I'll just recompile libpcap with the dag libraries, and then recompile bro with the new libpcap.
> Ben Wood
> Bro mailing list
> bro at bro-ids.org
More information about the Bro