[Bro] [Not] Running Bro as root?

[Azoff, Justin S]

> On Jun 13, 2018, at 5:41 PM, Michał Purzyński <michalpurzynski1 at gmail.com> wrote:
> 
> And to your second point - yes, bro documentation needs some improvements when it comes to the afpacket.

Agreed.  I put together some of what we have now for starting up a bro cluster using pf_ring since that used to be the only generic option.

Now that af_packet is working almost everywhere I want to add a section to the docs for that.  The bro side of things is actually really simple,
most of the effort goes into validating that af_packet is hashing things properly.


— 
Justin Azoff