# PF\_RING Tuple config

**URL:** https://community.zeek.org/t/pf-ring-tuple-config/2933
**Category:** Zeek
**Created:** [December 10, 2013, 2:32pm UTC](https://community.zeek.org/t/pf-ring-tuple-config/2933 "2013-12-10T14:32:09Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Ward\_Sladek](https://avatars.discourse-cdn.com/v4/letter/w/ecae2f/32.png) [@Ward\_Sladek](https://community.zeek.org/u/Ward_Sladek)
#### Post date: [December 10, 2013, 2:32pm UTC](https://community.zeek.org/t/pf-ring-tuple-config/2933/1 "2013-12-10T14:32:09Z")

</div>

Is there a way to change PF\_RING’s cluster/tuple type within Bro? Such as a parameter I can include in node.cfg? I’m running Bro 2.2.

---

<div class="post-metadata">

### Author: ![Daniel\_Thayer](https://avatars.discourse-cdn.com/v4/letter/d/8dc957/32.png) [@Daniel\_Thayer](https://community.zeek.org/u/Daniel_Thayer)
#### Post date: [December 12, 2013, 12:12am UTC](https://community.zeek.org/t/pf-ring-tuple-config/2933/2 "2013-12-12T00:12:18Z")

</div>

There is no such option in Bro 2.2, but I've created a git branch  
"topic/dnthayer/ticket1108" in the broctl repository that  
you can test if you want. In that branch, I've added a  
new broctl option called "PFRINGClusterType" that you can  
set in broctl.cfg in order to choose a different PF\_RING cluster type.

-Daniel

---

<div class="post-metadata">

### Author: ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:41pm UTC](https://community.zeek.org/t/pf-ring-tuple-config/2933/3 "2022-05-06T15:41:26Z")

</div>