[Bro] Interface bonding w/ Bro 1.5.1

[Seth Hall]

On Apr 5, 2010, at 2:44 PM, Mike Weaver wrote:

> I'm in the process of upgrading from 1.4 to 1.5.1.  I have a splitter
> feeding 2 NICs running on Ubuntu 8.04, eth0 & eth1.  With Bro 1.4 I  
> could
> specify interface="eth0 eth1" and set them up with no IP address.

I'm surprised to hear that doesn't work.  I don't think anything  
changed with that area of the code.

> Any suggestions?  I can't find much in the way of applicable  
> documentation.
> I know that Ubuntu is not the development platform, but it fits into  
> our
> shop better than FreeBSD.


I don't know if it's the most efficient way or not, but I've have  
created bridges and added all of my interfaces into the bridge.  It's  
supported by almost everything and the configuration is really simple.

   .Seth

---
Seth Hall
Network Security - Office of the CIO
The Ohio State University
Phone: 614-292-9721