[Bro] Version: 2.0-907 -- Bro manager memory exhaustion

[Scott Campbell]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This is not a particularly well thought out venture, but the intention
is to lower the pain associated with the process through example.
With this new functionality, bro itself is is well placed for
clustering, but the systems side - like OS tuning, driver
configuration, traffic distribution etc etc still could be much better
documented.

I completely agree that use cases are probably the best way to go
about conveying this information.  See you there -

cheers,
scott

On 8/1/12 4:08 PM, Vlad Grigorescu wrote:
> On 8/1/12 4:59 PM, "Scott Campbell" <scampbell at lbl.gov> wrote:
> 
>> Š something as simple as a cut and paste of the PF_RING/ixgbe
>> startup configs and the node.cfg
> 
> 
> Perhaps I'm misunderstanding what you're looking for, but is this
> still needed with the new load balancing support in broctl?
> 
> From <http://git.bro-ids.org/broctl.git/blob/HEAD:/CHANGES>:
> 
> * Improvements to built-in load-balancing support. Instead of
> adding a separate worker entry in node.cfg for each Bro worker
> process on each worker host, it is now possible to just specify the
> number of worker processes on each host. (Daniel Thayer)
> 
> This change adds three new keywords to the node.cfg file (to be 
> used with worker entries): lb_procs (specifies number of workers on
> a host), lb_method (specifies what type of load balancing to use:
> pf_ring, myricom, or interfaces), and lb_interfaces (used only with
> "lb_method=interfaces" to specify which interfaces to load-balance
> on).
> 
> Two new broctl plugins (which operate automatically and the user 
> doesn't need to be aware of them) are added to set the appropriate 
> environment variables when either PF_RING or myricom load-balancing
> is being used.
> 
> 
> 
> What might be interesting is to document some use cases on the
> website. e.g. a university is looking at 8 Gbps on 5 boxes with 8
> workers each, using Myricom NICs, and a Gigamon Whatever-42
> frontend.
> 
> 
> --Vlad
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iD8DBQFQGaCkK2Plq8B7ZBwRAhHLAKCwQaieXtoBh61RtuVRJLCJVgwo+QCg5IYM
CaceVLzdD4NG3z9N+B5yUIg=
=g+Qf
-----END PGP SIGNATURE-----