[Bro] Bro performance issues

[Seth Hall]

On Nov 2, 2011, at 11:45 AM, Tomer Teller wrote:

> When running broctl's netstats, this is what i see:
> 
> worker-1: 1320276618.514073 recvd=669576 dropped=0 link=669576
> worker-2: 1320276618.714115 recvd=669576 dropped=0 link=669576
> 
> I expect to see load-balance between worker-1 and worker-2 but they are getting the same traffic. 

Can you send the output of:

broctl config | grep -i pfring

and:

ldd <prefix>/bin/bro

Thanks,
  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/