[Bro] bro-dag plugin available

Stephen Donnelly Stephen.Donnelly at endace.com
Mon May 14 15:30:26 PDT 2018


>From: Seth Hall <seth at corelight.com>
>
>Cool!  Thanks for not only creating a new packet source but also making a
>broctl plugin and adding it to the Bro package manager!  Nice job all around. :)

Thanks! We wanted to integrate it as smoothly as possible, so please let us know if you have any further feedback.

>I only have one small request.  Would you mind changing the documentation
>to use two workers instead of the "lb_interfaces" option?
>I don't know if anyone actually uses that option anymore and I'd be a little
>worried that we might break it on accident.  You should be able to break that
>into two separate worker stanzas, each with one of the interfaces that you've
>defined in your documentation.  You get the additional benefit that you can
>specify different numbers of "lb_procs"
>for each one and any other differentiated configuration that you need.

I didn't realise lb_interfaces was out of date, so I'll remove that section. I think it is clear enough how to use multiple workers.

Stephen




More information about the Bro mailing list