Quick PF_RING question

Zeek
1

Hey all,

So I'm reading up and wanting to try out PF_RING for bro. Is there a way you use this using command line bro? The documentation only talks about clustering using PF_RING, and that's not what I want to do. End goal is to reduce packet loss. Thank you.

James

2

Yeah, just take a look at the pf_ring plugin in broctl. There are just a few environment variables you need to set.

  .Seht

3

Perfect..thanks for the direction Seth.

James

4

any idea regarding dynamic protocol detection in bro give me simple script example