I have been running Bro with af_packet for some time now, but this morning I noticed I have a massive capture loss, on the order of 10-30% capture loss across the workers. Could this be because I did not have checksums turned off in local.bro?
I have been running Bro with af_packet for some time now, but this morning I noticed I have a massive capture loss, on the order of 10-30% capture loss across the workers. Could this be because I did not have checksums turned off in local.bro?