The problem with Bro is how resource intensive it is to run. On a 1Gb/s stream, you wouldnt need “much” (this is highly relative…). On a 10Gb/s, you really need to identify what your actual throughput is like. For us, our 4.5Gb/s sustained traffic needs ~400gigs of ram and 40 cores. :slight_smile: A…

Subject: 10Gbps Bro deployment

Topic		Replies	Views
BRO performance in a real world Zeek	9	222	May 6, 2022
Bro system requirements for 1gbps traffic Zeek	2	138	May 6, 2022
Bro with 10Gb NIC's or higher Zeek	23	290	May 6, 2022
About Bro Processing Speed Zeek	5	164	May 6, 2022
10 Gb capable Bro cluster Zeek	2	113	May 6, 2022