[Bro-Dev] #943: PF_Ring plugin to support load balancing while sniffing multiple interfaces

Bro Tracker bro at tracker.bro.org
Thu Mar 21 15:39:15 PDT 2013


#943: PF_Ring plugin to support load balancing while sniffing multiple interfaces
-------------------------+------------------------
  Reporter:  seth        |      Owner:  dnthayer
      Type:  Problem     |     Status:  new
  Priority:  High        |  Milestone:  Bro2.2
 Component:  BroControl  |    Version:  git/master
Resolution:              |   Keywords:
-------------------------+------------------------

Comment (by Daniel Thayer <dnthayer@…>):

 In [changeset:616ee2e6bdef47ab4fa91e85870689a8ff70effa/broctl]:
 {{{
 #!CommitTicketReference repository="broctl"
 revision="616ee2e6bdef47ab4fa91e85870689a8ff70effa"
 Add support for multiple PF_RING cluster IDs

 Instead of assigning the same PF_RING cluster ID to every worker
 in a Bro cluster, the pf_ring broctl plugin has been modified to
 automatically assign a different PF_RING cluster ID for each set
 of workers on a host that all sniff the same interface.  The first
 such set of workers on a host are assigned the globally-configured
 PF_RING cluster ID (this is the "pfringclusterid" broctl option in
 broctl.cfg).  Each subsequent set of workers on a host that sniff
 another interface are assigned a different value (incremented by
 one from previous value).

 Addresses #943.
 }}}

-- 
Ticket URL: <http://tracker.bro.org/bro/ticket/943#comment:2>
Bro Tracker <http://tracker.bro.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list