[Bro] zbalance_ipc with multiple applications and Bro
seth at icir.org
Wed Feb 11 20:08:29 PST 2015
> On Feb 11, 2015, at 10:14 AM, Michał Purzyński <michalpurzynski1 at gmail.com> wrote:
> Same for just zc:99 and not a surprise, Bro somehow needs to open
> sub-interfaces 4-7.
> Is it even supported?
It is actually. :)
In node.cfg, you would config a worker like this…
In broctl.cfg, you’d set this…
That should make it work. Unfortunately pfringfirstappinstance is a global variable for broctl, but it was easier when I was implementing it and I would generally expect people to be running the same or substantially similar zbalance_ipc configurations everywhere.
International Computer Science Institute
(Bro) because everyone has a network
More information about the Bro