[Bro] Troubleshooting crashes

Doug Burks doug.burks at gmail.com
Tue Sep 25 10:56:56 PDT 2012


Great job, Tritium Cat and all!

Will there be a 2.1.1 release for this?

Thanks,
Doug

On Tue, Sep 25, 2012 at 11:55 AM, Seth Hall <seth at icir.org> wrote:
>
> On Sep 25, 2012, at 7:03 AM, Tritium Cat <tritium.cat at gmail.com> wrote:
>
>> The PF_RING issue has been fixed and the API now allows selecting cluster mode via API (with environment variables).
>
> Nice!
>
>> If PFRINGClusterType is not defined then the default will be "cluster_per_flow", which is essentially 5-tuple unless the 802.1Q header is present.
>
> Cool!  Daniel, can you merge this into your branch where you had fixed this previously (when I was wrong about how to fix it)?
>
> Thanks,
>   .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro-ids.org/
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro



-- 
Doug Burks
http://securityonion.blogspot.com



More information about the Bro mailing list