# Problem of Broccoli Connect to Bro load balance cluster

**URL:** <https://community.zeek.org/t/problem-of-broccoli-connect-to-bro-load-balance-cluster/3704>\
**Category:** Zeek\
**Created:** [July 11, 2015, 4:01am UTC](https://community.zeek.org/t/problem-of-broccoli-connect-to-bro-load-balance-cluster/3704 "2015-07-11T04:01:56Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![vwmb](https://avatars.discourse-cdn.com/v4/letter/v/a698b9/32.png) [@vwmb](https://community.zeek.org/u/vwmb)\
**Post date:** [July 11, 2015, 4:01am UTC](https://community.zeek.org/t/problem-of-broccoli-connect-to-bro-load-balance-cluster/3704/1 "2015-07-11T04:01:56Z")

</div>

I flow the [https://www.bro.org/documentation/load-balancing.html](https://www.bro.org/documentation/load-balancing.html) build a balance cluster by using pfring.  
the node.cfg is below:

[manager]  
type=manager  
host=10.2.27.208

[proxy-1]  
type=proxy  
host=10.2.27.208

[worker-1]  
type=worker  
host=10.2.27.208  
interface=eth1  
lb\_method=pf\_ring  
lb\_procs=4  
pin\_cpus=1,2,3,4

It is works well. I wrote a bro script want to receive events by broccoli.The script works well too.  
Part of my script is blow:

…

redef Communication::nodes += {  
[“http\_detail”] = [$host = 10.2.27.208, $events = /http\_detail/, $connect=T, $ssl=F]  
};

…

And i found there is many port on the host 10.2.27.208:

tcp 0 0 0.0.0.0:47761 0.0.0.0:\* LISTEN 5228/bro  
tcp 0 0 0.0.0.0:47762 0.0.0.0:\* LISTEN 5402/bro  
tcp 0 0 0.0.0.0:47763 0.0.0.0:\* LISTEN 6001/bro  
tcp 0 0 0.0.0.0:47764 0.0.0.0:\* LISTEN 6003/bro  
tcp 0 0 0.0.0.0:47765 0.0.0.0:\* LISTEN 6004/bro  
tcp 0 0 0.0.0.0:47766 0.0.0.0:\* LISTEN 6002/bro

**Witch port I should connect ?**

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:42pm UTC](https://community.zeek.org/t/problem-of-broccoli-connect-to-bro-load-balance-cluster/3704/2 "2022-05-06T15:42:51Z")

</div>

Closed on May 6, 2022, 3:42pm UTC


