[Bro] napatech nt4e-4t

[Seth Hall]

On Mar 1, 2013, at 12:56 PM, Ghost Pepper <ghostpepper007 at gmail.com> wrote:

> Does anyone know if bro-ids capturing from a napatech card is known not to work?
> I've successfully compiled against the napatech provided libpcap, and ldd shows linkage to
> /opt/napatech3/lib/{ libpcap.so.1, libntapi.so, libntos.so }

I've never heard that anyone has tried.  Does their libpcap wrapper support the nonblocking functionality in libpcap?  There are relatively few applications that use libpcap in nonblocking mode so it's certainly possible that they haven't implemented it.

  .Seth


--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/