[Bro-Dev] #580: pf_ring support

[G. Clark]

The PF_RING user land library seems to be LGPL; the code itself seems to 
disagree with itself as to which version applies (pfring.h says 2 or 
later, pfring.c says 3 or later).  COPYING is LGPL v3, so I'd assume 
that was the intended license.

--Gilbert

On 8/31/11 2:02 PM, Bro Tracker wrote:
> #580: pf_ring support
> -----------------------------+--------------------
>   Reporter:  seth             |      Owner:
>       Type:  Feature Request  |     Status:  new
>   Priority:  Normal           |  Milestone:  Bro1.7
> Component:  Bro              |    Version:
>   Keywords:                   |
> -----------------------------+--------------------
>   Martin has convinced me that it's worthwhile to go ahead and get pf_ring
>   support added sooner rather than later since it's a very common way of
>   doing single interface load balancing on Linux.  Eventually we should move
>   toward a more generic PktSrc model (I don't think what we have is quite
>   abstracted enough) but since the pf_ring code would be surrounded by
>   #ifdefs anyway it should be fairly clean to rip it out later when we have
>   a more generic way of grabbing packets and the code that would need to be
>   added to support it should be fairly minimal.
>
>   Like the syslog writer, I'm not sure of a timeline on this either.  I'm
>   setting it to the release after the next, but if we could squeeze it into
>   the next release I'm sure that everyone would benefit.
>


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6010 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20110831/dee33620/attachment-0001.bin