[Bro] Using native PF_RING plugin with broctl

[Azoff, Justin S]

> On Feb 27, 2017, at 6:12 AM, Jullian Remi <remi.jullian at ssi.gouv.fr> wrote:
> 
> 
> 
> However I do not have any problem running bro as a standalone process
> with local commands such as:
> 
> $/usr/local/bro/bin/bro -i pf_ring::eth0
> listening on eth0
> 
> and:
> 
> $/usr/local/bro/bin/bro -N | grep PF
> Bro::PF_RING - Packet acquisition via PF_RING (dynamic, version 1.0)
> 
> This tends to prove Bro plugin has been installed and works.
> 
> I think Broctl is launching Bro binary without the right settings for
> the plugin to be found/to work correctly. Am I missing something with
> configuration files ?
> May be the environment variables aren't properly set?

How did you install bro?  Do you have more than one version of bro installed?

What environment variables are you referring to?



-- 
- Justin Azoff