[Bro] Use PFRING_ZC for Bro

Clement Chen plutochen2010 at gmail.com
Tue Jan 27 13:21:35 PST 2015


Hi all,

I am trying to use PFRING_ZC for Bro in my security onion box. I got the
license from ntop but there was little document on how to enable this.

Would appreciate any help/pointer to docs. I will compile a step-by-step
instructions if I get this working.

I have the Intel 82599EB 10G card and the ixgbe-zc driver installed.

#dkms status
ixgbe-zc, 3.22.3, 3.13.0-44-generic, x86_64: installed
pf_ring, 6, 3.13.0-35-generic, x86_64: installed
pf_ring, 6, 3.13.0-44-generic, x86_64: installed (WARNING! Diff between
built and installed module!)
pfring, 6.0.3, 3.13.0-44-generic, x86_64: installed

not sure what to do next and how to enable it for Bro.

Thanks.

-Clement
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150127/d48615e7/attachment.html 


More information about the Bro mailing list