[Bro] Compiling Bro with Endace Dag Support

[Mike Patterson]

Can’t speak for what’s actually supported, but I’ve not been disappointed with using libpcap with DAG, bro vs that libpcap.

That said, use pcap 1.3.0. 1.4.0 had some issues, can’t recall their precise nature but “they don’t work at all” sticks in the mind. :)

Mike

On Oct 28, 2013, at 6:02 PM, Benjamin Wood <ben.bt.wood at gmail.com> wrote:

> All,
> 
> Is this functionality still supported?
> 
> I believe I've been able to get bro to use libpcap compiled with dag libraries, but is there native support?
> 
> I remember reading somewhere that I could run "./configure --with-dag" to compile bro with dag support.
> 
> If not I'll just recompile libpcap with the dag libraries, and then recompile bro with the new libpcap.
> 
> Thanks,
> Ben Wood
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro