[Bro] Troubleshooting crashes

Seth Hall seth at icir.org
Mon Sep 17 18:10:36 PDT 2012


On Sep 17, 2012, at 8:18 PM, Tritium Cat <tritium.cat at gmail.com> wrote:

> I think the fix should be as easy as including another PF_RING environment variable when starting bro.

Oh!  I didn't realize this was settable through an environment variable when using their libpcap wrappers.  Do you happen to know the variable?  That's something we definitely need to be setting, almost everyone with VLAN tagged traffic has trouble with the default PF_RING setting.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/





More information about the Bro mailing list