[Bro] Trying to use different bpf filters on every worker

C. L. Martinez carlopmart at gmail.com
Mon Feb 24 04:07:00 PST 2014


Hi all,

 After installing my first bro cluster with one manager and three
workers, now I need to configure different bpf filters for every bro
worker.

 If I am not worng, I need to put an entry like this:

redef cmd_line_bpf_filter = "ip and port 80 or port 443"; (for example)

 under local.bro file on every worker node. Is this correct for Bro 2.2??

Thanks.



More information about the Bro mailing list