On Nov 3, 2011, at 6:10 PM, Martin Holste wrote: > Actually, I recommend setting up a bonded interface, which recent > PF_RING's will happily monitor. Ah, nice! Thanks for pointing that out. .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro-ids.org/