[Zeek] pf_ring

[venkatesh bandari]

Hello Team,

i installed zeek and using standard libcap
ldd /opt/zeek/bin/zeek | grep pcap
        libpcap.so.1 => /lib64/libpcap.so.1 (0x00007f1bad618000)

iam seeing the box is dropping 40% packets.iam planning to have 2 more
workers with pf_ring.Installed pf_ring

in the link https://www.zeek.org/documentation/load-balancing.html
it says zeek to point to below libcap.how doi change the to pfring sware
libcap

ldd /usr/local/bro/bin/bro | grep pcap
        libpcap.so.1 => /opt/pfring/lib/libpcap.so.1
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20191106/e826f4ce/attachment.html