[Bro-Dev] #845: PF_RING+DNA

[Bro Tracker]

#845: PF_RING+DNA
------------------------------+------------------------
  Reporter:  dnthayer         |      Owner:  dnthayer
      Type:  Feature Request  |     Status:  assigned
  Priority:  Normal           |  Milestone:  Bro2.3
 Component:  BroControl       |    Version:  git/master
Resolution:                   |   Keywords:
------------------------------+------------------------

Comment (by scampbell):

 I did some testing for this and made a couple of changes.  First the
 pfdnacluster_master needs to fork away on run or it will block the
 starting of the worker nodes.  Second, the worker nodes will need to use
 the pfdnacluster_master interfaces, rather than (ex.) dna0.  The
 pfdnacluster_master interface is called dnacluster:nn w/ nn being the
 pf_ring id.

 To run as (not root), just use:

 setcap cap_net_raw,cap_net_admin=eip /usr/bin/pfdnacluster_master

-- 
Ticket URL: <http://tracker.bro.org/bro/ticket/845#comment:5>
Bro Tracker <http://tracker.bro.org/bro>
Bro Issue Tracker