# load balancing question.

**URL:** <https://community.zeek.org/t/load-balancing-question/4373>\
**Category:** Zeek\
**Created:** [September 28, 2016, 7:36pm UTC](https://community.zeek.org/t/load-balancing-question/4373 "2016-09-28T19:36:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dk\_Jack](https://avatars.discourse-cdn.com/v4/letter/d/8c91f0/32.png) [@Dk\_Jack](https://community.zeek.org/u/Dk_Jack)\
**Post date:** [September 28, 2016, 7:36pm UTC](https://community.zeek.org/t/load-balancing-question/4373/1 "2016-09-28T19:36:13Z")

</div>

Hi,  
Does bro handle the case where I sniffing from two interfaces I1 and I2, and I1 sees the client side traffic and I2 see the server side traffic? If this is supported, does the scenario of more than two interfaces also work? Thanks.

Dk.

---

<div class="post-metadata">

**Author:** ![johanna](https://avatars.discourse-cdn.com/v4/letter/j/50afbb/32.png) [@johanna](https://community.zeek.org/u/johanna)\
**Post date:** [September 30, 2016, 9:11pm UTC](https://community.zeek.org/t/load-balancing-question/4373/2 "2016-09-30T21:11:36Z")

</div>

Hi,

to add to the already given answer - I \_suspect\_, that it might work when  
you start Bro and specify several interfaces (bro -i eth0 -i eth1).  
However, I am not quite sure if the packets will arrive at Bro in the  
correct ordering in that case, especially when there is very quick timing  
(i.e. interleaved packets that arrive on both interfaces in very quick  
succcession and have to be parsed in the correct order).

So - try it and tell us your results 🙂

Johanna

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:44pm UTC](https://community.zeek.org/t/load-balancing-question/4373/3 "2022-05-06T15:44:04Z")

</div>