[Bro-Dev] #599: Capstats and pf_ring

Bro Tracker bro at tracker.bro-ids.org
Wed Sep 14 11:28:20 PDT 2011


#599: Capstats and pf_ring
-----------------------------+--------------------
  Reporter:  seth            |      Owner:
      Type:  Problem         |     Status:  closed
  Priority:  High            |  Milestone:  Bro1.6
 Component:  Capstats        |    Version:
Resolution:  Solved/Applied  |   Keywords:  beta
-----------------------------+--------------------
Changes (by jsiwek):

 * status:  new => closed
 * resolution:   => Solved/Applied


Comment:

 Seth confirmed this is fixed by
 [0a661845e6221ddf08de273ef10b91573902d6ac/capstats].  Nonblocking mode
 wasn't being set on the pcap handle as it should have been, and he was
 running in an environment where a worker node wasn't seeing any packets on
 the monitored interface.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/599#comment:2>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list