[Bro-Dev] #580: pf_ring support

Bro Tracker bro at tracker.bro-ids.org
Wed Aug 31 14:02:40 PDT 2011

#580: pf_ring support
 Reporter:  seth             |      Owner:
     Type:  Feature Request  |     Status:  new
 Priority:  Normal           |  Milestone:  Bro1.7
Component:  Bro              |    Version:
 Keywords:                   |
 Martin has convinced me that it's worthwhile to go ahead and get pf_ring
 support added sooner rather than later since it's a very common way of
 doing single interface load balancing on Linux.  Eventually we should move
 toward a more generic PktSrc model (I don't think what we have is quite
 abstracted enough) but since the pf_ring code would be surrounded by
 #ifdefs anyway it should be fairly clean to rip it out later when we have
 a more generic way of grabbing packets and the code that would need to be
 added to support it should be fairly minimal.

 Like the syslog writer, I'm not sure of a timeline on this either.  I'm
 setting it to the release after the next, but if we could squeeze it into
 the next release I'm sure that everyone would benefit.

Ticket URL: <http://tracker.bro-ids.org/bro/ticket/580>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker

More information about the bro-dev mailing list