[Bro] Bro performance issues

[Seth Hall]

On Nov 1, 2011, at 4:26 AM, Tomer Teller wrote:

> I configured the node.cfg and added:
> 1 manager 
> 1 proxy
> 2 workers  - sniffing the same interface

Could you send the content of your node.cfg file?  I noticed in your broctl session you sent, there was a reference to worker-3 which isn't represented in your description.

Thanks,
  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/