[Bro] Question on PacketFilter::DroppedPackets

[Espresso Beanies]

Hi Johanna,

Thanks for the clarification. I wasn't sure if one method had an advantage
over another.

On Fri, Mar 3, 2017 at 6:20 PM, Johanna Amann <johanna at icir.org> wrote:

> On Thu, Feb 16, 2017 at 02:05:19PM -0500, Espresso Beanies wrote:
> > Hi,
> >
> > It seems no matter what I do, I still get these notices
> > "PacketFilter::DroppedPackets". I created more workers, but I have a
> > question about creating new workers via using an existing worker to
> capture
> > on the same interface using the "lb_procs" method to up the number of
> > "sub-threads?" for multi-CPU processing. What advantage does a new worker
> > give me over "lb_procs"?
>
> It is the same, lb_procs also basically just creates new workers; the
> advantage is that it does things automatically for you that you would have
> to configure by hand otherwhise.
>
> Johanna
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170307/ed468ed2/attachment.html