# PF\_Ring plugin Issue **URL:** https://community.zeek.org/t/pf-ring-plugin-issue/6052 **Category:** Zeek **Created:** [March 18, 2020, 9:57am UTC](https://community.zeek.org/t/pf-ring-plugin-issue/6052 "2020-03-18T09:57:15Z") **Posts on this page:** 4 **Page:** 1
### Author: ![Jorge\_Garcia\_Rodrigu](https://avatars.discourse-cdn.com/v4/letter/j/a5b964/32.png) [@Jorge\_Garcia\_Rodrigu](https://community.zeek.org/u/Jorge_Garcia_Rodrigu) #### Post date: [March 18, 2020, 9:57am UTC](https://community.zeek.org/t/pf-ring-plugin-issue/6052/1 "2020-03-18T09:57:15Z")
Hi guys, Recently we have been trying different ways to balance the traffic between workers. The thing is that we tried installing the pf\_ring plugin, and we installed right. We changed the node.cfg interface to pf\_ring::X and it worked but now that we uninstalled the plugin we are having an issue that its like the packets are still going to the pf\_ring::X interface but like the plugin is not installed anymore if we put the pf\_ring::X interface in the node.cfg, Zeek workers don’t start. So, now the only way that Zeek workers start is with the normal interface name but zeek don’t see any traffic in this interface. So it seems that we did something wrong when we uninstalled the plugin. Can someone help me to solve this issue please? Thank you all. Best Regards! ---
### Author: ![JustinAzoff](https://avatars.discourse-cdn.com/v4/letter/j/13edae/32.png) [@JustinAzoff](https://community.zeek.org/u/JustinAzoff) #### Post date: [March 18, 2020, 7:52pm UTC](https://community.zeek.org/t/pf-ring-plugin-issue/6052/2 "2020-03-18T19:52:16Z")
If you installed pf\_ring and then built zeek, it's possible that you ended up compiling zeek against the libpcap from pf\_ring, instead of the standard libpcap. Try a     ldd $(which zeek) and see which libpcap it is using. In any case, you should try the af\_packet plugin. ---
### Author: ![Michal\_Purzynski1](https://avatars.discourse-cdn.com/v4/letter/m/a88e57/32.png) [@Michal\_Purzynski1](https://community.zeek.org/u/Michal_Purzynski1) #### Post date: [March 18, 2020, 9:50pm UTC](https://community.zeek.org/t/pf-ring-plugin-issue/6052/3 "2020-03-18T21:50:24Z")
Is there any part of pf\_ring functionality that you cannot find in the af\_packet capture mechanism? ---
### Author: ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system) #### Post date: [May 6, 2022, 3:47pm UTC](https://community.zeek.org/t/pf-ring-plugin-issue/6052/4 "2022-05-06T15:47:09Z")