[Bro] How to use PF_RING multi?

[Thomas, Eric D]

I found the answer. I missed the lb_interfaces option.
--
Eric Thomas
edthoma at sandia.gov

From: <Thomas>, "Thomas, Eric D" <edthoma at sandia.gov<mailto:edthoma at sandia.gov>>
Date: Thursday, November 13, 2014 10:05 AM
To: "bro at bro.org<mailto:bro at bro.org>" <bro at bro.org<mailto:bro at bro.org>>
Subject: How to use PF_RING multi?

What is the configuration needed to run bro with PF_RING using its link aggregation (multi) capability? This below (a snippet of node.cfg) doesn't do it:

[bro-pf]
type=worker
host=X.X.X.X
interface=multi:em1;em2
lb_method=pf_ring
lb_procs=8

--
Eric Thomas
edthoma at sandia.gov<mailto:edthoma at sandia.gov>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20141113/c8175ccf/attachment.html