[Bro] rss queue conflict question

erik clark philosnef at gmail.com
Thu Jul 13 06:12:13 PDT 2017


What happens when you squash the rss queue down to one on a bro box with
multiple worker nodes, while using the af_packet plugin? With pf_ring (this
may be outdated), its recommended you have a queue for each worker. Is this
necessary, when af_packet has fanout?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170713/9c3b90c4/attachment.html 


More information about the Bro mailing list