[Bro] Duplicate Entries - using PF_RING

John Bradley jeb446 at msstate.edu
Thu Aug 25 14:47:45 PDT 2016

I've been trying to optimize our bro cluster and noticed that, even after 
building PF_RING and Bro according to various documentations, I still get 
duplicated entries.

The kernel modules are loaded, BRO is built to support PF_RING.

This is what I see when I check /pro/net/pf_ring/dev/eth2/info

Name:              eth2
Index:             4
Address:           [mac address]
Polling Mode:      NAPI
Type:              Ethernet
Family:            Standard NIC
# Bound Sockets:   0
Max # TX Queues:   40
# Used RX Queues:  40

Help would be appreciated.

John Bradley
ITS Network Services
Systems Programmer

More information about the Bro mailing list