[Bro] Question about listening on multiple interfaces

[Samuel Oehlert]

I've always done a separate worker in that case, which I believe is the
most common way, though I'm not sure if one way is correct vs incorrect, or
just common vs uncommon.

-Sam

On Wed, Apr 5, 2017 at 12:09 PM, Espresso Beanies <espressobeanies at gmail.com
> wrote:

> Good afternoon,
>
> I'm trying to see what would be the best way to direct Bro to listen on
> multiple interfaces. I currently have one interface defined in my node.cfg
> file but to add the second, is it best to create a separate worker or
> define the interface in broctl using 'broargs'?
>
> Thanks,
>
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170405/1e7f7df2/attachment.html