# PFRING support on RPM packages **URL:** \ **Category:** Zeek\ **Created:** [February 9, 2019, 11:39am UTC](https://community.zeek.org/t/pfring-support-on-rpm-packages/5610 "2019-02-09T11:39:44Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Martin\_Eric\_J](https://avatars.discourse-cdn.com/v4/letter/m/77aa72/32.png) [@Martin\_Eric\_J](https://community.zeek.org/u/Martin_Eric_J)\ **Post date:** [February 9, 2019, 11:39am UTC](https://community.zeek.org/t/pfring-support-on-rpm-packages/5610/1 "2019-02-09T11:39:44Z")
I’m overhauling some East / West sensors, and one thought is to deploy Zeek to minimize what we need to manage (as opposed to individual Snort / Argus sensors). Since these machines are using Intel 525 cards, I will be using PFRing as a load balancer. Does the bro RPM support this? I looked and don’t think so, though I wanted to ask here before rolling my own RPM. Please excuse any typos / brevity, I'm on my mobile. Thank you, ---
**Author:** ![ericooi](https://avatars.discourse-cdn.com/v4/letter/e/ecae2f/32.png) [@ericooi](https://community.zeek.org/u/ericooi)\ **Post date:** [February 9, 2019, 2:51pm UTC](https://community.zeek.org/t/pfring-support-on-rpm-packages/5610/2 "2019-02-09T14:51:19Z")
Don’t think they do either, especially since the official Zeek documentation includes a step on compiling from source to do it. [https://www.zeek.org/documentation/load-balancing.html](https://www.zeek.org/documentation/load-balancing.html) Just in case it helps, I wrote an article on installing Zeek from source with PF\_RING on CentOS. [https://www.ericooi.com/zeekurity-zen-part-i-how-to-install-zeek-bro-on-centos-7/](https://www.ericooi.com/zeekurity-zen-part-i-how-to-install-zeek-bro-on-centos-7/) I’m eventually going to change it to use AF\_PACKET instead, as that’s what seems to be recommended in past threads from the Zeek folks. I’ve also been using AF\_PACKET in my own production system at work without issues. ---
**Author:** ![Jan](https://avatars.discourse-cdn.com/v4/letter/j/ce7236/32.png) [@Jan](https://community.zeek.org/u/Jan)\ **Post date:** [February 11, 2019, 4:10pm UTC](https://community.zeek.org/t/pfring-support-on-rpm-packages/5610/3 "2019-02-11T16:10:57Z")
On 09/02/2019 15:51, Eric Ooi wrote:\> I’m eventually going to change it to use AF\_PACKET instead, as that’s what > seems to be recommended in past threads from the Zeek folks. I’ve also > been using AF\_PACKET in my own production system at work without issues. Note that the AF\_Packet plugin does not need Bro/Zeek sources anymore to build as Bro/Zeek 2.6 comes with the necessary include files. Jan ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:46pm UTC](https://community.zeek.org/t/pfring-support-on-rpm-packages/5610/4 "2022-05-06T15:46:20Z")