[Bro] Interface bonding w/ Bro 1.5.1

[Mike Weaver]

Thanks, I'll keep playing with it and look at the bridging solution.

Mike

-----Original Message-----
From: Seth Hall [mailto:hall.692 at osu.edu] 
Sent: Monday, April 05, 2010 3:00 PM
To: weaver at ascr.doe.gov
Cc: Bro at bro-ids.org
Subject: Re: [Bro] Interface bonding w/ Bro 1.5.1


On Apr 5, 2010, at 2:44 PM, Mike Weaver wrote:

> I'm in the process of upgrading from 1.4 to 1.5.1.  I have a splitter
> feeding 2 NICs running on Ubuntu 8.04, eth0 & eth1.  With Bro 1.4 I  
> could
> specify interface="eth0 eth1" and set them up with no IP address.

I'm surprised to hear that doesn't work.  I don't think anything  
changed with that area of the code.

> Any suggestions?  I can't find much in the way of applicable  
> documentation.
> I know that Ubuntu is not the development platform, but it fits into  
> our
> shop better than FreeBSD.


I don't know if it's the most efficient way or not, but I've have  
created bridges and added all of my interfaces into the bridge.  It's  
supported by almost everything and the configuration is really simple.

   .Seth

---
Seth Hall
Network Security - Office of the CIO
The Ohio State University
Phone: 614-292-9721