We’re running Bro version 2.4.1 on CENTOS 7 with Myricom driver version 3.0.6. When we run broctl capstats, we get the error below.
Do you need to set the APP_ID (probably not the real var name) to allow multiple apps to read from the cards?
Ensure you have the Sniffer10G license & drivers installed.
Compile Bro with Myricom support (./configure --with-pcap=/opt/snf/).
Use interfaces ‘snf0’ and ‘snf1’.
Thanks Harry, that was it. I made the following changes in case anyone else runs into it.
I modified my workers config to add the SNF_APP_ID: