[Bro] Multiple interfaces on 2.2-beta-4
seth at icir.org
Thu Sep 26 19:27:29 PDT 2013
On Sep 26, 2013, at 6:13 PM, "Thomas, Eric D" <edthoma at sandia.gov> wrote:
> I'm not sure this is a bug, which is why I didn't post it on the tracker. In 2.1 one could do this in node.cfg:
Heh, the previous behavior was technically a bug. :)
I guess I don't really know what to say, sniffing multiple interfaces was never something we actually supported when you run Bro with broctl and we continue not to support it. Generally we recommend merging multiple streams of traffic upstream of where Bro receives the packets.
International Computer Science Institute
(Bro) because everyone has a network
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130926/56642eee/attachment.bin
More information about the Bro