[Bro] PF_RING integration with Bro IDS post-install

Michał Purzyński michalpurzynski1 at gmail.com
Tue Aug 9 18:12:39 PDT 2016


Use a bro plugin for pfring. No need to rebuild anything, just that plugin. Avoids libpcap.

https://github.com/bro/bro-plugins

> On 10 Aug 2016, at 01:54, Johanna Amann <johanna at icir.org> wrote:
> 
> Hello Dave,
> 
>> Is there a way to enable PF_RING after a Bro IDS install? From what I saw,
>> the Bro IDS documentation (
>> https://www.bro.org/documentation/load-balancing.html) mentions the
>> following pre-configuration to enable "pf_ring" pre-install but I wanted to
>> know if it can be enabled post-install:
> 
> since Bro has to be compiled against the correct pfring libraries, this
> sadly cannot be enabled without re-compiling and re-installing Bro.
> 
> Johanna
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160810/c16c5c25/attachment.html 


More information about the Bro mailing list