[Zeek] Manager, Proxy and Worker all logging the same notice to notice.log

Justin Azoff justin at corelight.com
Thu Dec 26 16:00:53 PST 2019


On Thu, Dec 26, 2019 at 6:01 PM Denny Sabu <Denny.Sabu at sensato.co> wrote:

> node.cfg is as follows:
>
> [manager]
> type=manager
> host=localhost
> interface=enp101s0f1
>
> [proxy-1]
> type=proxy
> host=localhost
> interface=enp101s0f1
>
> [worker-1]
> type=worker
> host=localhost
> interface=enp101s0f1
> lb_method=pf_ring
> lb_procs=16
> pin_cpus=4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
>

You've told the manager and proxy to capture from enp101s0f1.. remove those
lines and this problem will go away.  Also, you should add a logger section.

-- 
Justin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20191226/7af3dd61/attachment.html 


More information about the Zeek mailing list