Quick PF_RING question

Hey all,

So I'm reading up and wanting to try out PF_RING for bro. Is there a way you use this using command line bro? The documentation only talks about clustering using PF_RING, and that's not what I want to do. End goal is to reduce packet loss. Thank you.


Yeah, just take a look at the pf_ring plugin in broctl. There are just a few environment variables you need to set.


Perfect..thanks for the direction Seth.


any idea regarding dynamic protocol detection in bro give me simple script example