[Bro-Dev] #949: High CPU from polling loop on low traffic links

Bro Tracker bro at tracker.bro-ids.org
Mon Feb 25 07:25:37 PST 2013


#949: High CPU from polling loop on low traffic links
--------------------------+------------------------
  Reporter:  liamrandall  |      Owner:
      Type:  Problem      |     Status:  new
  Priority:  Low          |  Milestone:  Bro2.2
 Component:  Bro          |    Version:  git/master
Resolution:               |   Keywords:
--------------------------+------------------------

Comment (by liamrandall):

 To change Bro to "Standalone Mode" on SecurityOnion

 /opt/bro/etc/node.cfg

 Backup and replace with:

 {{{
 [bro]
 type=standalone
 host=localhost
 interface=eth0
 }}}


 Where eth0 is interface to monitor, then:

 {{{

 sudo broctl check
 sudo broctl install
 sudo broctl restart
 }}}

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/949#comment:1>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list