I've followed the steps to get Bro to use pf_ring and it even shows that it's using the pf_ring/lib, but as soon as I install from my manager it reverts back to libpcap. Any ideas? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160718/ff8d0bb3/attachment.html