[Bro] Multiple interfaces on 2.2-beta-4

[Seth Hall]

On Sep 26, 2013, at 6:13 PM, "Thomas, Eric D" <edthoma at sandia.gov> wrote:

> I'm not sure this is a bug, which is why I didn't post it on the tracker. In 2.1 one could do this in node.cfg:

Heh, the previous behavior was technically a bug. :)

I guess I don't really know what to say, sniffing multiple interfaces was never something we actually supported when you run Bro with broctl and we continue not to support it.  Generally we recommend merging multiple streams of traffic upstream of where Bro receives the packets.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130926/56642eee/attachment.bin