Two instances of bro on the same host?

I figured it out. Two zeek installations (/opt/zeek1, /opt/zeek2), two node.cfg files, and most importantly, the second zeekctl.cfg with the port changed:

ZeekPort = 48760

instead of the default 47760 port.

I don’t know if this is supported, but it seems to work.


Dockorize bro, you can have as many as you want.