Running Zeek & Suricata on Same Network Interface
TQ <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAM2MKSry+o=bfO5w2GG84ZhDJOPpiFm4RYXza4oTfNWcdf6DUg@mail.gmail.com> |
Hello All, Has anyone ran Zeek and Suricata (or something similar) off from the same network interface; especially via docker? If yes, did you see any issues at all? I shortly ran both off from the same interface, but wasn't very sure due to minimum traffic. Is it better to get a fancy Intel NIC with SR-IOV feature and spawn off virtual interfaces? Have a great weekend all. Thanks, _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek