[Bro] Multiple interfaces on 2.2-beta-4

Seth Hall seth at icir.org
Thu Sep 26 19:27:29 PDT 2013

On Sep 26, 2013, at 6:13 PM, "Thomas, Eric D" <edthoma at sandia.gov> wrote:

> I'm not sure this is a bug, which is why I didn't post it on the tracker. In 2.1 one could do this in node.cfg:

Heh, the previous behavior was technically a bug. :)

I guess I don't really know what to say, sniffing multiple interfaces was never something we actually supported when you run Bro with broctl and we continue not to support it.  Generally we recommend merging multiple streams of traffic upstream of where Bro receives the packets.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130926/56642eee/attachment.bin 

More information about the Bro mailing list