[Bro] DAG cards and bro

Aashish Sharma aashish at uiuc.edu
Wed Jul 19 11:49:09 PDT 2006


Hi Scott : 

We are (trying) to use DAG cards with bro and argus to capture data of our 10G route. 

We did have initial problems including bro not supporting dag cards and even the choice of OS to run those on. Now, after interacting with Robin Sommer, bro does have support built in for the dag cards. Thanks Robin ! 

As of performance, currently we are facing the issue of getting too little light using optical splitter and thus are waiting for a optical switch which is in order. 

Once we get the switch we should be able to start the monitoring and see how bro behaves. Right now, with the support libraries in place, complilation and installation is not a problem at all. 

I can update you of performance once we get the switch and have enough signal getting to the cards. 

Hope this helps. 

Aashish Sharma 
On Wed, Jul 19, 2006 at 10:59:33AM -0700, scott campbell wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Anybody have feedback regarding the use of DAG cards and bro?  I looked
> over the code checked in, but am more interested in actual behavior (ie
> stability and performance).
> 
> thanks!
> 
> scott
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.6 (GNU/Linux)
> Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org
> 
> iD8DBQFEvnMFK2Plq8B7ZBwRAhzEAKDCNY5MIT97JeAplCfN6QaMCIl9ZACgwrHS
> VAnBoqgZKXVbJrVGOcUqgvg=
> =6GCR
> -----END PGP SIGNATURE-----
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 307 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20060719/00f595fa/attachment.bin 


More information about the Bro mailing list