# PF\_Ring Cluster Install **URL:** \ **Category:** Zeek\ **Created:** [September 16, 2015, 7:40pm UTC](https://community.zeek.org/t/pf-ring-cluster-install/3832 "2015-09-16T19:40:34Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Davison\_Charles\_Robe](https://avatars.discourse-cdn.com/v4/letter/d/85e7bf/32.png) [@Davison\_Charles\_Robe](https://community.zeek.org/u/Davison_Charles_Robe)\ **Post date:** [September 16, 2015, 7:40pm UTC](https://community.zeek.org/t/pf-ring-cluster-install/3832/1 "2015-09-16T19:40:34Z")
I have seen different documentation around building PF\_Ring to integrate with bro. I have performed the below already. However, I installed bro from wget instead of from source so does that mean I have to start over? If so does anyone have detailed documentation for configuring bro from source along with all components? I have worked with PF\_Ring before and know it can be challenging to get going. I also have many questions regarding how to properly configure the `node.cfg` and making sure my boxes are configured in the right manner, depending on the processor architecture being used. Would processor architecture affect setting the lb\_method, lb\_procs, and pin\_cpus in AWS? Honestly, if someone well versed in PF\_Ring could speak to all those points and some of the questions below we could set up a web-ex. Once I get it running properly I can give the documentation I have made to the bro team so they can update the site regarding all these questions so others who are new to this and might have the same questions can just read the further documentation on the site. sudo apt-get update sudo apt-get upgrade sudo apt-get install linux-headers-$(uname -r) sudo apt-get install libnuma-dev git clone [https://github.com/ntop/PF\_RING.git](https://github.com/ntop/PF_RING.git) cd PF\_RING/kernel ./configure make make install sudo insmod ./pf\_ring.ko cd … cd userland/ cd …/userland make From here when I install based on the instructions from the bro [website](https://www.bro.org/sphinx/configuration/index.html#preparing-to-setup-a-cluster)I perform the following and do not see anything in /usr/src to extract: cd /usr/src tar xvzf PF\_RING-5.6.2.tar.gz cd PF\_RING-5.6.2/userland/lib ./configure --prefix=/opt/pfring make install I also receive the following when attempting to perform any further configurations: ubuntu@ip-172-31-38-121:~$ cd …/libpcap -bash: cd: …/libpcap: No such file or directory ubuntu@ip-172-31-38-121:~$ cd …/tcpdump-4.1.1 -bash: cd: …/tcpdump-4.1.1: No such file or directory ubuntu@ip-172-31-38-121:~$ cd …/…/kernel -bash: cd: …/…/kernel: No such file or directory ubuntu@ip-172-31-38-121:~$ I also need information on how to load the pf\_ring module at boot time for Ubuntu 14.04. ---
**Author:** ![Davison\_Charles\_Robe](https://avatars.discourse-cdn.com/v4/letter/d/85e7bf/32.png) [@Davison\_Charles\_Robe](https://community.zeek.org/u/Davison_Charles_Robe)\ **Post date:** [September 18, 2015, 1:16pm UTC](https://community.zeek.org/t/pf-ring-cluster-install/3832/2 "2015-09-18T13:16:05Z")
I have seen different documentation around building PF\_Ring to integrate with bro. I have performed the below already. However, I installed bro from wget instead of from source so does that mean I have to start over? If so does anyone have detailed documentation for configuring bro from source along with all components? I have worked with PF\_Ring before and know it can be challenging to get going. I also have many questions regarding how to properly configure the `node.cfg` and making sure my boxes are configured in the right manner, depending on the processor architecture being used. Would processor architecture affect setting the lb\_method, lb\_procs, and pin\_cpus in AWS? Honestly, if someone well versed in PF\_Ring could speak to all those points and some of the questions below we could set up a web-ex. Once I get it running properly I can give the documentation I have made to the bro team so they can update the site regarding all these questions so others who are new to this and might have the same questions can just read the further documentation on the site. sudo apt-get update sudo apt-get upgrade sudo apt-get install linux-headers-$(uname -r) sudo apt-get install libnuma-dev git clone [https://github.com/ntop/PF\_RING.git](https://github.com/ntop/PF_RING.git) cd PF\_RING/kernel ./configure make make install sudo insmod ./pf\_ring.ko cd … cd userland/ cd …/userland make From here when I install based on the instructions from the bro [website](https://www.bro.org/sphinx/configuration/index.html#preparing-to-setup-a-cluster)I perform the following and do not see anything in /usr/src to extract: cd /usr/src tar xvzf PF\_RING-5.6.2.tar.gz cd PF\_RING-5.6.2/userland/lib ./configure --prefix=/opt/pfring make install I also receive the following when attempting to perform any further configurations: ubuntu@ip-172-31-38-121:~$ cd …/libpcap -bash: cd: …/libpcap: No such file or directory ubuntu@ip-172-31-38-121:~$ cd …/tcpdump-4.1.1 -bash: cd: …/tcpdump-4.1.1: No such file or directory ubuntu@ip-172-31-38-121:~$ cd …/…/kernel -bash: cd: …/…/kernel: No such file or directory ubuntu@ip-172-31-38-121:~$ I also need information on how to load the pf\_ring module at boot time for Ubuntu 14.04. ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:43pm UTC](https://community.zeek.org/t/pf-ring-cluster-install/3832/3 "2022-05-06T15:43:05Z")