[Bro] Cluster setup

hiren panchasara hiren.panchasara at gmail.com
Fri Nov 1 11:36:35 PDT 2013


On Fri, Nov 1, 2013 at 10:34 AM, Seth Hall <seth at icir.org> wrote:
>
> On Nov 1, 2013, at 11:36 AM, hiren panchasara <hiren.panchasara at gmail.com> wrote:
>
>>> Typically people run PF_Ring in mode 0 which is actually not exposing hardware load balanced traffic.  It's collecting all of the traffic and load balancing it in the core.
>>
>> Here, core == bro's core?
>
>
> Sorry, totally wrong word.  I meant kernel. :)

Ah, okay. So instead of card, let kernel do all the load balancing
(probably with assistance from PF_RING).

Thank you,
Hiren



More information about the Bro mailing list