[Zeek] PFRING support on RPM packages

Jan Grashöfer jan.grashoefer at gmail.com
Mon Feb 11 08:10:57 PST 2019


On 09/02/2019 15:51, Eric Ooi wrote:> I’m eventually going to change it 
to use AF_PACKET instead, as that’s what
> seems to be recommended in past threads from the Zeek folks.  I’ve also
> been using AF_PACKET in my own production system at work without issues.

Note that the AF_Packet plugin does not need Bro/Zeek sources anymore to 
build as Bro/Zeek 2.6 comes with the necessary include files.

Jan


More information about the Zeek mailing list