[Zeek] zeek worker nodes

venkatesh bandari austin522 at gmail.com
Wed Nov 6 04:09:33 PST 2019


Hello Team,

could you please share the details if anyone of you deployed worker nodes
.a little background of what iam doing
         1.installed zeek
          2.we are seeing 40% packet loss on interface
          3.installed  pf_ring but i was not able to  do the below step as
i already installed zeek(not compiled from source).It is a yum install
                              ldd /usr/local/bro/bin/bro | grep pcap
libpcap.so.1 => /opt/pfring/lib/libpcap.so.1

           4.i went a ahead and spawn 2 worker nodes
                          [worker-1]
type=worker
host=localhost
interface=eth0
lb_method=pf_ring
lb_procs=10
pin_cpus=2,3,4,5,6,7,8,9,10,11

[worker-2]
type=worker
host=localhost
interface=eth0
lb_method=pf_ring
lb_procs=10
pin_cpus=12,13,14,15,16,17,18,19,20,21
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20191106/fa60fa0d/attachment.html 


More information about the Zeek mailing list