[Bro-Dev] #621: Re: PCAP_PF_RING_CLUSTER_ID

Bro Tracker bro at tracker.bro-ids.org
Sun Sep 18 21:50:46 PDT 2011


#621: Re: [Bro-Dev] PCAP_PF_RING_CLUSTER_ID
------------------------+---------------------
 Reporter:  robin       |       Type:  Problem
   Status:  new         |   Priority:  Normal
Milestone:  Bro1.6      |  Component:  Bro
  Version:  git/master  |   Keywords:  beta
------------------------+---------------------
 On Thu, Sep 15, 2011 at 22:19 -0400, you wrote:

 > Heh, it's "bro" typed out on a phone number pad (276) represented as
 > an 8bit int (wrapped around).  In other words, it's a fairly arbitrary
 > number. :)

 I see. :) But let's then please use something like 0 or -1 to indicate
 that it actually doesn't matter. Arbitrary values can be quite
 confusing for the non-initiated.

 > I thought about doing that, but it seemed somewhat superfluous since
 > those environment variables will only be used if the pf_ring libpcap
 > wrapper is used.  It does seem like the right thing to do however.

 Yeah, for the same reason as above: I bet that otherwise somebody will
 scratch his head at some point to understand what effect
 PCAP_PF_RING_CLUSTER_ID has on his FreeBSD box.

 Cc'in the tracker. Tasks are:

     - If system doesn't have PF_RING support, don't set environment
     variable.

     - If system has PF_RING support, set ID to a default that
     indicates "not set".

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/621>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list