[Bro] node.cfg multiple interface convention?
crharwood at gmail.com
Thu Sep 29 12:10:38 PDT 2016
One of my installations runs on an old linux laptop monitoring wifi traffic
exclusively in standalone.
I'm wondering what the convention is for node.cfg to add monitoring to the
wired interface as well.
The use case is, the system is taken off the wifi and restarted at a second
location for monitoring a wired connection.
Is the following node.cfg valid?
Or is a better configuration to use 2 workers, one for each interface?
Thanks in advance,
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro