[Bro] PF_RING integration with Bro IDS post-install

[Dave Florek]

Thank you.

What 'configure' option would I use to activate PF_RING if I installed
pf_ring from the ntop repo and not a source package? I'm not sure if
/opt/pfring is referencing a program or directory for it to see certain
files.

On Tue, Aug 9, 2016 at 9:12 PM, Michał Purzyński <michalpurzynski1 at gmail.com
> wrote:

> Use a bro plugin for pfring. No need to rebuild anything, just that
> plugin. Avoids libpcap.
>
> https://github.com/bro/bro-plugins
>
> On 10 Aug 2016, at 01:54, Johanna Amann <johanna at icir.org> wrote:
>
> Hello Dave,
>
> Is there a way to enable PF_RING after a Bro IDS install? From what I saw,
>
> the Bro IDS documentation (
>
> https://www.bro.org/documentation/load-balancing.html) mentions the
>
> following pre-configuration to enable "pf_ring" pre-install but I wanted to
>
> know if it can be enabled post-install:
>
>
> since Bro has to be compiled against the correct pfring libraries, this
> sadly cannot be enabled without re-compiling and re-installing Bro.
>
> Johanna
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> <http://mailman.icsi.berkeley.edu/mailman/listinfo/bro>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160810/bb3a237c/attachment-0001.html