[Bro] PacketFilter

[Seth Hall]

> On Mar 20, 2017, at 5:27 PM, Dave Crawford <bro at pingtrip.com> wrote:
> 
> Sure, I’ll uninstall netmap-libpcap, install the standard Debian libpcap-dev and recompile Bro. Will respond back with observations.

You don’t need to do that if you don’t want to.  Just compile and install the netmap plugin that ships with Bro 2.5.  Check out the README that comes with it too because it explains how to configure a cluster with the netmap plugin.

 .Seth

--
Seth Hall * Corelight, Inc * seth at corelight.com * www.corelight.com