[Bro] Quick PF_RING question

Seth Hall seth at icir.org
Thu May 28 12:58:07 PDT 2015


> On May 28, 2015, at 11:47 AM, James Lay <jlay at slave-tothe-box.net> wrote:
> 
> So I'm reading up and wanting to try out PF_RING for bro.  Is there a
> way you use this using command line bro?  The documentation only talks
> about clustering using PF_RING, and that's not what I want to do.  End
> goal is to reduce packet loss.  Thank you.

Yeah, just take a look at the pf_ring plugin in broctl.  There are just a few environment variables you need to set.

  .Seht

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150528/9046e718/attachment.bin 


More information about the Bro mailing list