[Bro] af_packet/pf_ring equivalency

erik clark philosnef at gmail.com
Mon Oct 31 09:38:22 PDT 2016


I am using pf_ring with pfcount to do traffic analysis (pps/throughput)
since it is very reliable.

Does af_packet have an equivalent for this? I dont want to use broctl
capstats unless there is absolutely no other option.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161031/ee8dd1ed/attachment.html 


More information about the Bro mailing list