[Bro] Example node.cfg for Multi-Interface collection on one box

[James Lay]

On 2014-01-09 15:36, Andy Schworer wrote:
> Im having trouble finding complete documentation on how to configure 
> a
> bro instance for monitoring multiple interfaces on the same host.
>
> [bro]
>
> type=standalone
>
> host=localhost
>
> interface=eth1
>
> What needs to change to monitor eth1 & eth2?

Assuming you're using broctl, add:

broargs = -i eth2

to your broctl.cfg file

James