[Bro] Using native PF_RING plugin with broctl

Azoff, Justin S jazoff at illinois.edu
Mon Feb 27 09:30:20 PST 2017

> On Feb 27, 2017, at 6:12 AM, Jullian Remi <remi.jullian at ssi.gouv.fr> wrote:
> However I do not have any problem running bro as a standalone process
> with local commands such as:
> $/usr/local/bro/bin/bro -i pf_ring::eth0
> listening on eth0
> and:
> $/usr/local/bro/bin/bro -N | grep PF
> Bro::PF_RING - Packet acquisition via PF_RING (dynamic, version 1.0)
> This tends to prove Bro plugin has been installed and works.
> I think Broctl is launching Bro binary without the right settings for
> the plugin to be found/to work correctly. Am I missing something with
> configuration files ?
> May be the environment variables aren't properly set?

How did you install bro?  Do you have more than one version of bro installed?

What environment variables are you referring to?

- Justin Azoff

More information about the Bro mailing list