# Command line bro on two interfaces

**URL:** https://community.zeek.org/t/command-line-bro-on-two-interfaces/2634
**Category:** Zeek
**Created:** [April 5, 2013, 4:03pm UTC](https://community.zeek.org/t/command-line-bro-on-two-interfaces/2634 "2013-04-05T16:03:06Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![James\_inthe\_box](https://avatars.discourse-cdn.com/v4/letter/j/6f9a4e/32.png) [@James\_inthe\_box](https://community.zeek.org/u/James_inthe_box)
#### Post date: [April 5, 2013, 4:03pm UTC](https://community.zeek.org/t/command-line-bro-on-two-interfaces/2634/1 "2013-04-05T16:03:06Z")

</div>

Hey all...so here's my line:

/usr/sbin/bro -i eth4 -i eth5 local Site::local\_nets += { externalip/mask }

I was thinking this was working, but alas, I see in my email packet captures that I think it's only listening on one interface as bro has missed an email that came by..I have no record of it anywhere. Is this not the right way to get this to work? I don't want to use broctl since the cpu usage is far too high. Thank you for any tips you may have.

James

---

<div class="post-metadata">

### Author: ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:40pm UTC](https://community.zeek.org/t/command-line-bro-on-two-interfaces/2634/2 "2022-05-06T15:40:54Z")

</div>


