[Bro] Netmap

Seth Hall seth at icir.org
Wed Feb 8 08:18:45 PST 2017


Nice!  Let me know if you have any problems.

  .Seth

> On Feb 8, 2017, at 10:50 AM, Michael Shirk <shirkdog.bsd at gmail.com> wrote:
> 
> In the FreeBSD sense, 12-CURRENT has a recent check-in of netmap code into the OS/Kernel, which is usable by default. You have to compile lb from the netmap github repo.
> 
> lb compiles and works with 11-STABLE but YMMV with the use of it with the netmap code.
> 
> --
> Michael Shirk
> Daemon Security, Inc.
> http://www.daemon-security.com
> 
> On Feb 8, 2017 10:42 AM, "Seth Hall" <seth at icir.org> wrote:
> 
> > On Feb 8, 2017, at 7:52 AM, Dave Crawford <bro at pingtrip.com> wrote:
> >
> > Related to my other question on PF_Ring… I just read through Seth’s slides on Netmap (https://www.bro.org//bro4pros2017/Hall_Netmap_Bro4Pros2017.pdf) and I’m curious if it's currently a viable solution for production? From the slides it appears to be a much simpler implementation than PF_Ring, while providing the same performance as PF_Ring ZC?
> 
> It is viable with the caveat that it's still a bit in development.  I've used it quite a bit and it's been very stable for me.   Let me know if you run into any trouble if you try it!
> 
>  .Seth
> 
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/
> 
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/




More information about the Bro mailing list