[Bro-Dev] PF_RING cluster ID

Martin Holste mcholste at gmail.com
Wed Aug 31 09:52:35 PDT 2011

> Use the cluster deployment in BroControl and assign each of the virtual interfaces to a separate worker node.  Since you're running the git master though, keep in mind that the broctl master that is currently checked out has some problems.  I'll work on merging in our fixed branch today and I'll reply again once it's updated.

What I'm confused about is where the docs refer to a "node."  Can this
be just another instance of Bro, with all instances on the same
machine?  I don't want to run Bro on separate machines, I want to run
a lot of Bros on the same machine, and I want each instance to see
only some of the flows.

More information about the bro-dev mailing list