[Bro] Question on PacketFilter::DroppedPackets

Espresso Beanies espressobeanies at gmail.com
Thu Feb 16 11:05:19 PST 2017


Hi,

It seems no matter what I do, I still get these notices
"PacketFilter::DroppedPackets". I created more workers, but I have a
question about creating new workers via using an existing worker to capture
on the same interface using the "lb_procs" method to up the number of
"sub-threads?" for multi-CPU processing. What advantage does a new worker
give me over "lb_procs"?

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170216/0315361a/attachment.html 


More information about the Bro mailing list