[Bro] Endace support in use?

[Martin Holste]

We have an Endace card and I would like to give Bro a shot on it at
some point in the future.

On Tue, Nov 2, 2010 at 6:02 PM, Jason Ish <ish at unx.ca> wrote:
> On Mon, Oct 18, 2010 at 1:33 PM, Robin Sommer <robin at icir.org> wrote:
>> Bro currently comes with native support for Endace cards (i.e.,
>> using the Endace API directly, not via their libpcap-compatible
>> interface).
>>
>> The support is enabled by configuring with --with-dag. As we're
>> cleaning up the Bro distribution, we were wondering if anybody is
>> using this functionality and would object seeing it removed?
>
> Hi Robin,
>
> I'm posting this on behalf of the Endace CEO, Stuart Wilson as he is
> not a member of this list and is unable to post.  Note that I also
> work for Endace, but am subscribed here with my personal address:
>
> Hi Robin.
>
> We’re seeing need from the Government space to retain this, and of
> course we’d like to see it retained as well.
>
> We’re happy to put some work to maintain it if you can leave it in
> please.  Updating to the latest drivers etc. might be useful.
>
> Thanks,
> Stuart Wilson
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>