[Bro] Bro Packet Loss / 10gb ixgbe / pf_ring

Seth Hall seth at icir.org
Fri Jan 8 09:22:56 PST 2016

> On Jan 8, 2016, at 11:24 AM, Nash, Paul <Paul.Nash at tufts.edu> wrote:
> Thanks Seth - I have my node.cfg to point to zc:eth3
> interface=zc:eth3
> Upon running broctl cleanup/deploy, I’m seeing that bro is called with only "-i zc:eth3”.  I tried calling it with “zc:2” (cluster ID) and zbalance_ipc handed out 8k packets before the bro workers crashed. 

Oh!  I forgot, that’s the right way to use it.  I forgot about the cluster ID thing.  Forget what I said before. :)

Could you send me a log from Bro crashing (hopefully you got a stack trace in your crash dump from broctl)?  That could be some unrelated problem.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list