[Bro] Duplicate log entries for events

Brendan Dalpe brendan-dalpe at utulsa.edu
Tue Oct 8 14:16:11 PDT 2013


I'm running into an issue where I'm seeing multiple entries in my logs for
a single event which is duplicated 4 times. The entries are all identical
except for the UID. I'm running 4 worker processes on the server monitoring
one interface.

node.cfg:

[manager]
type=manager
host=10.1.26.22

[proxy]
type=proxy
host=10.1.26.22

[bro-eth0]
type=worker
host=10.1.26.22
interface=eth0
lb_method=pf_ring
lb_procs=4


Any thoughts?

Thanks in advance,

Brendan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20131008/02221f84/attachment.html 


More information about the Bro mailing list