[Zeek] PFRING support on RPM packages
Jan Grashöfer
jan.grashoefer at gmail.com
Mon Feb 11 08:10:57 PST 2019
On 09/02/2019 15:51, Eric Ooi wrote:> I’m eventually going to change it
to use AF_PACKET instead, as that’s what
> seems to be recommended in past threads from the Zeek folks. I’ve also
> been using AF_PACKET in my own production system at work without issues.
Note that the AF_Packet plugin does not need Bro/Zeek sources anymore to
build as Bro/Zeek 2.6 comes with the necessary include files.
Jan
More information about the Zeek
mailing list