[Bro] Endace support in use?

Seth Hall seth at icir.org
Wed Nov 3 08:41:53 PDT 2010


On Nov 2, 2010, at 7:02 PM, Jason Ish wrote:
> We’re happy to put some work to maintain it if you can leave it in
> please.  Updating to the latest drivers etc. might be useful.

Excuse my ignorance, but what benefits are gained from using the native API as opposed to using the customized libpcap?

  .Seth



More information about the Bro mailing list