Hello Team,

i installed zeek and using standard libcap
ldd /opt/zeek/bin/zeek | grep pcap => /lib64/ (0x00007f1bad618000)

iam seeing the box is dropping 40% packets.iam planning to have 2 more workers with pf_ring.Installed pf_ring

in the link
it says zeek to point to below doi change the to pfring sware libcap

ldd /usr/local/bro/bin/bro | grep pcap => /opt/pfring/lib/ 

Why not give AF_Packet a try? We have an official zpkg package and a plugin, with some instructions here