Hello Team, i installed zeek and using standard libcap ldd /opt/zeek/bin/zeek | grep pcap libpcap.so.1 => /lib64/libpcap.so.1 (0x00007f1bad618000) iam seeing the box is dropping 40% packets.iam planning to have 2 more workers with pf_ring.Installed pf_ring in the link https://www.zeek.org/docum…

Why not give AF_Packet a try? We have an official zpkg package and a plugin, with some instructions here https://github.com/J-Gras/bro-af_packet-plugin

pf_ring

Zeek

Topic		Replies	Views
Issue: load balancer PF_RING drops 25% of incoming packets Zeek	2	99	May 6, 2022
zeek worker nodes Zeek	2	152	May 6, 2022
Packet loss and compilation issues with PF_RING plugin on Zeek 8.0.6 (3.5 Gbps traffic) Zeek	3	68	February 10, 2026
Is PF_RING much better than AF packet plugin? Zeek	1	723	May 6, 2022
PF_Ring plugin Issue Zeek	3	168	May 6, 2022

pf_ring

Related topics