# Building Bro with PF\_RING

**URL:** <https://community.zeek.org/t/building-bro-with-pf-ring/4501>\
**Category:** Zeek\
**Created:** [November 21, 2016, 3:17am UTC](https://community.zeek.org/t/building-bro-with-pf-ring/4501 "2016-11-21T03:17:51Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Po-Ching\_Lin](https://avatars.discourse-cdn.com/v4/letter/p/278dde/32.png) [@Po-Ching\_Lin](https://community.zeek.org/u/Po-Ching_Lin)\
**Post date:** [November 21, 2016, 3:17am UTC](https://community.zeek.org/t/building-bro-with-pf-ring/4501/1 "2016-11-21T03:17:51Z")

</div>

Dear all,

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I tried the method introduced in the following link:

[https://www.bro.org/sphinx-git/components/bro-plugins/pf\_ring/README.html](https://www.bro.org/sphinx-git/components/bro-plugins/pf_ring/README.html)

,but the output of bro -N Bro::PF\_RING is not as expected, given PF\_RING is installed

in /usr/local. That web page suggests the use of --with-pfring in configure, but it seems

that configure does not support that option. There is another way to build with PF\_RING:

[https://www.bro.org/documentation/load-balancing.html](https://www.bro.org/documentation/load-balancing.html)

This method works. Should the first document be updated?

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:44pm UTC](https://community.zeek.org/t/building-bro-with-pf-ring/4501/2 "2022-05-06T15:44:19Z")

</div>

Closed on May 6, 2022, 3:44pm UTC