[Bro] capstats doesnt work with af_packet
philosnef at gmail.com
Thu Nov 10 07:15:21 PST 2016
Hm, after investigating, I think this might be a parsing issue of node.cfg?
If I set the interface to em3 by itself with bro already running, capstats
works with broctl. This seems to indicate to me that maybe node.cfg isn't
parsing out interfaces using plugins? I can't find the broctl function that
handles the capstats call.
On Thu, Nov 10, 2016 at 9:17 AM, erik clark <philosnef at gmail.com> wrote:
> Subject says it all. When I run interface=af_packet::em3, broctl capstats
> reports no statistics.
> How can I fix this, as I rely on this information for traffic profiling of
> the system. Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro