[Bro] My last issue I hope

[Justin Azoff]

On Thu, Jun 20, 2013 at 09:50:12AM -0500, Richards, James L - DOA wrote:
> So everything is humming along with no errors, but also no events.
> 
> In looking at pf_ring, specifically /proc/net/pf_ring, I am seeing that it does
> not appear to be capturing packets…

The simplest cause could be that you have an issue with the tap/span
port that is supposed to be feeding you traffic.  Is your sensor
definitely receiving traffic?  Are the ethernet links up?


-- 
-- Justin Azoff
-- Network Security & Performance Analyst