Re: zbalance_ipc and Zeek
william de ping <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAKZA8xgK5eB=vSd0KZKOfnnhK67rFOoswAJA=ub+UHopMYoeRA@mail.gmail.com> |
Hi Colin, Can you please clarify your deployment ? (node.cfg file, NIC type, PF_RING version, zbalance_ipc parameters and the ingress line rate ) Thanks B On Fri, Mar 15, 2019 at 12:38 AM COLIN BLAIR <[email protected]> wrote: > Hi All, > > Does anyone have a success story using zbalance_ipc and Zeek. We are > getting very high packet loss using zbalance_ipc. When we remove > zbalance_ipc, Zeek performs well on pf_ring zero copy with RSS. Any advice > is appreciated. > > R, > CB > _______________________________________________ > Zeek mailing list > [email protected] > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek