[Bro] Pcap Buffer = 0

[Justin Azoff]

On Thu, Jun 16, 2011 at 12:26:24PM -0400, Chuck Little wrote:
> I have a fresh Bro-IDS install (ver 1.5.3), but I'm not really capturing
> traffic. I know I'm missing something (config setting, etc) but am
> unsure what it is. I consulted teh Google but didn't have much luck.
> Could someone provide some insight/advice? Thanks!
> 
> -Chuck

Does broctl capstats show your interfaces receiving packets?

-- 
-- Justin Azoff
-- Network Security & Performance Analyst