# So before I upgrade (pf\_ring revisit)
**URL:** https://community.zeek.org/t/so-before-i-upgrade-pf-ring-revisit/4987
**Category:** Zeek
**Created:** [August 14, 2017, 6:07pm UTC](https://community.zeek.org/t/so-before-i-upgrade-pf-ring-revisit/4987 "2017-08-14T18:07:55Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@James\_inthe\_box](https://community.zeek.org/u/James_inthe_box)
#### Post date: [August 14, 2017, 6:07pm UTC](https://community.zeek.org/t/so-before-i-upgrade-pf-ring-revisit/4987/1 "2017-08-14T18:07:55Z")
As I recall last time around, there was a pf\_ring vs. bro pf\_ring plugin thread going on a while ago. I thought I’d revisit this since I’m going from 2.5.0 to 2.5.1. So…here’s what I have:
[https://www.bro.org/documentation/load-balancing.html](https://www.bro.org/documentation/load-balancing.html)
I believe the above is complete yes? The only question I would have answered here is what options to pass via command line.
[https://www.bro.org/sphinx/components/bro-plugins/pf\_ring/README.html](https://www.bro.org/sphinx/components/bro-plugins/pf_ring/README.html)
So THIS link is for using the plugin…this has info about starting command line, but not via node.cfg. I’m assuming I could use:
```auto
pf_ring::eth0
instead of interface? Or do I just use what's in the load-balancing link? Additionally, what's the benefit of using one over the other method? Thank you.
James
```
---
### Author:  [@seth](https://community.zeek.org/u/seth)
#### Post date: [August 17, 2017, 4:13pm UTC](https://community.zeek.org/t/so-before-i-upgrade-pf-ring-revisit/4987/2 "2017-08-17T16:13:09Z")
Sorry for the delay in answering!
> pf\_ring::eth0
>
> instead of interface? Or do I just use what's in the load-balancing
> link? Additionally, what's the benefit of using one over the other
> method? Thank you.
I think you may want to use whats in the load-balancing link (the libpcap wrapper approach).
I'm not sure of the state of the pf\_ring plugin, especially since we removed everything in the bro-plugins repository. Robin emailed package maintainers there to try and get them to create Bro packages and I'm not sure the pf\_ring one was moved over. The other problem is that the pf\_ring plugin didn't/doesn't have a broctl plugin so you can't change any settings (such as the app\_id). I \*think\* that load balancing works with it though, but I'm not sure offhand how you'd configure it correctly with broctl.
.Seth
---
### Author:  [@James\_inthe\_box](https://community.zeek.org/u/James_inthe_box)
#### Post date: [August 17, 2017, 5:46pm UTC](https://community.zeek.org/t/so-before-i-upgrade-pf-ring-revisit/4987/3 "2017-08-17T17:46:16Z")
Awesome...thanks Seth I'll stick with the load-balancing link for now.
James
---
### Author:  [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:45pm UTC](https://community.zeek.org/t/so-before-i-upgrade-pf-ring-revisit/4987/4 "2022-05-06T15:45:12Z")