[Bro] Pcap Buffer = 0

Chuck Little mdmonk at gmail.com
Thu Jun 16 10:08:12 PDT 2011


Output:

[rigel /raid/bro/bin]# ./broctl capstats

Interface    kpps       mbps       (10s average)
------------------------------
rigel-igb0   0.0        0.0
rigel-igb1   39.7       147.0
rigel-igb2   19.2       96.7
rigel-igb3   24.1       137.3
rigel-igb4   0.0        0.0
rigel-igb5   0.0        0.0

Total        83.0       381.0


-Chuck

On 6/16/11 11:02 AM, Justin Azoff wrote:
> On Thu, Jun 16, 2011 at 12:26:24PM -0400, Chuck Little wrote:
>> I have a fresh Bro-IDS install (ver 1.5.3), but I'm not really capturing
>> traffic. I know I'm missing something (config setting, etc) but am
>> unsure what it is. I consulted teh Google but didn't have much luck.
>> Could someone provide some insight/advice? Thanks!
>>
>> -Chuck
> 
> Does broctl capstats show your interfaces receiving packets?
> 



More information about the Bro mailing list