[Bro] Question about listening on multiple interfaces
soehlert at es.net
Wed Apr 5 16:48:23 PDT 2017
I've always done a separate worker in that case, which I believe is the
most common way, though I'm not sure if one way is correct vs incorrect, or
just common vs uncommon.
On Wed, Apr 5, 2017 at 12:09 PM, Espresso Beanies <espressobeanies at gmail.com
> Good afternoon,
> I'm trying to see what would be the best way to direct Bro to listen on
> multiple interfaces. I currently have one interface defined in my node.cfg
> file but to add the second, is it best to create a separate worker or
> define the interface in broctl using 'broargs'?
> Bro mailing list
> bro at bro-ids.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro