[Bro] Using Bro without selectable fd support in libpcap

Paul Emberson pemberson at solarflare.com
Tue Dec 9 10:06:33 PST 2014


I am experimenting with Bro v2.3.1 using a version of libpcap that does not support an fd to call select() on.

I noticed that earlier versions had a compile time option --disable-select-loop to disable the use of this within Bro.  The only way I could find to use the recent version of Bro was to modify the code in a similar way to the conditional compilation used by --disable-select-loop (forcing 'idle = false' in PktSrc::ExtractNextPacket).

Have I missed any Bro configuration (compile or run time) that will allow it to busy wait in recent versions?  Is the intention for current and future versions of Bro to rely on selectable fd support in libpcap?

Thanks in advance for any advice.



The information contained in this message is confidential and is intended for the addressee(s) only. If you have received this message in error, please notify the sender immediately and delete the message. Unless you are an addressee (or authorized to receive for an addressee), you may not use, copy or disclose to anyone this message or any information contained in this message. The unauthorized use, disclosure, copying or alteration of this message is strictly prohibited.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20141209/2c4992d9/attachment.html 

More information about the Bro mailing list