[Bro] Bro and pf_ring
lucovsky at reservoir.com
Thu Jan 7 12:30:52 PST 2016
If you're using Bro 2.4 or later, the pf_ring plugin is included in the
stock Bro distribution. If that's the case, then you do not need the plugin
The plugin provides packet access when your setup includes PF_RING *and*
you're using Bro 2.4 or above. If you're using Bro 2.3 or earlier, plugins
don't apply as the architecture didn't support them.
When Bro introduced I/O sources with 2.4, the plugin architecture was
created; Bro 2.3 didn't use plugins for packet access. Check out the other
Bro 2.4 plugins in <bro-source-tree>/aux/bro-plugins.
212 780 0527 x173 <212%20780%200527%20x100>
On Thu, Jan 7, 2016 at 10:49 AM, Vito Logrillo <vitologrillo at gmail.com>
> Hi all,
> i'm using bro with the pf_ring driver in a cluster architecture as
> written in the link below
> Now i've seen a plugin for bro able to provide native pf_ring support
> Sorry for the lazy question, but which are the benefits of this plugin?
> Bro mailing list
> bro at bro-ids.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro