I've been using a simple clustered config. My config:
This cluster is not capturing any packet and I found it is because the nodes are not communicating with each other. cluster.log:
1629160260.237419 logger-1 created clone store: zeek/known/certs
1629160260.237419 logger-1 created clone store: zeek/known/services
1629160260.237419 logger-1 created clone store: zeek/known/hosts
1629160260.237419 logger-1 listening on :47761/tcp
And it doesn't grow any more. My localhost interface is UP, and when I capture traffic on localhost using tcpdump, I can see SYN packets transmitted to 47761. I'm not sure why logger-1 is not receiving them. Thanks for any help!