[Bro] Bro Packet Loss / 10gb ixgbe / pf_ring

[Seth Hall]

> On Jan 8, 2016, at 11:24 AM, Nash, Paul <Paul.Nash at tufts.edu> wrote:
> 
> 
> Thanks Seth - I have my node.cfg to point to zc:eth3
> 
> interface=zc:eth3
> 
> Upon running broctl cleanup/deploy, I’m seeing that bro is called with only "-i zc:eth3”.  I tried calling it with “zc:2” (cluster ID) and zbalance_ipc handed out 8k packets before the bro workers crashed. 

Oh!  I forgot, that’s the right way to use it.  I forgot about the cluster ID thing.  Forget what I said before. :)

Could you send me a log from Bro crashing (hopefully you got a stack trace in your crash dump from broctl)?  That could be some unrelated problem.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/