[Bro-Dev] #845: PF_RING+DNA

Bro Tracker bro at tracker.bro.org
Tue Jun 4 20:09:23 PDT 2013

  Reporter:  dnthayer         |      Owner:  dnthayer
      Type:  Feature Request  |     Status:  assigned
  Priority:  Normal           |  Milestone:  Bro2.3
 Component:  BroControl       |    Version:  git/master
Resolution:                   |   Keywords:

Comment (by scampbell):

 I did some testing for this and made a couple of changes.  First the
 pfdnacluster_master needs to fork away on run or it will block the
 starting of the worker nodes.  Second, the worker nodes will need to use
 the pfdnacluster_master interfaces, rather than (ex.) dna0.  The
 pfdnacluster_master interface is called dnacluster:nn w/ nn being the
 pf_ring id.

 To run as (not root), just use:

 setcap cap_net_raw,cap_net_admin=eip /usr/bin/pfdnacluster_master

Ticket URL: <http://tracker.bro.org/bro/ticket/845#comment:5>
Bro Tracker <http://tracker.bro.org/bro>
Bro Issue Tracker

More information about the bro-dev mailing list