[Bro] Question about listening on multiple interfaces

Samuel Oehlert soehlert at es.net
Wed Apr 5 16:48:23 PDT 2017

I've always done a separate worker in that case, which I believe is the
most common way, though I'm not sure if one way is correct vs incorrect, or
just common vs uncommon.


On Wed, Apr 5, 2017 at 12:09 PM, Espresso Beanies <espressobeanies at gmail.com
> wrote:

> Good afternoon,
> I'm trying to see what would be the best way to direct Bro to listen on
> multiple interfaces. I currently have one interface defined in my node.cfg
> file but to add the second, is it best to create a separate worker or
> define the interface in broctl using 'broargs'?
> Thanks,
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170405/1e7f7df2/attachment.html 

More information about the Bro mailing list