[Bro] Troubleshooting crashes

Seth Hall seth at icir.org
Tue Sep 25 08:55:07 PDT 2012


On Sep 25, 2012, at 7:03 AM, Tritium Cat <tritium.cat at gmail.com> wrote:

> The PF_RING issue has been fixed and the API now allows selecting cluster mode via API (with environment variables).

Nice!

> If PFRINGClusterType is not defined then the default will be "cluster_per_flow", which is essentially 5-tuple unless the 802.1Q header is present.

Cool!  Daniel, can you merge this into your branch where you had fixed this previously (when I was wrong about how to fix it)?

Thanks,
  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/





More information about the Bro mailing list