Re: How to configure multiple interfaces
Eric Ooi <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <[email protected]> |
You can unsubscribe here: http://mailman.icsi.berkeley.edu/mailman/listinfo/zeek <http://mailman.icsi.berkeley.edu/mailman/listinfo/zeek> > On Sep 3, 2019, at 3:42 AM, Иван Раткин <[email protected]> wrote: > > Guys, remove me from this, please. IDK how to stop recieving your emails about Bro. > Thanks. > 3 сент. 2019 г., 4:32 +0300, Raphael Shin <[email protected]>, писал: >> Hi, >> >> I am installing Bro on Redhat OS. >> >> My Bro machine has two interfaces. >> - Interface#1(p1p1) : Server farm inbound traffic >> - Interface#2(p1p2) : Server farm outbound traffic >> >> I configured two interfaces with pf_ring. >> >> node.cfg file is as follows. >> >> ---------------------------- >> [logger] >> type=logger >> host=localhost >> >> [manager] >> type=manager >> host=localhost >> >> [proxy-1] >> type=proxy >> host=localhost >> >> [worker-1] >> type=worker >> host=localhost >> interface=p1p1 >> lb_method=pf_ring >> lb_procs=2 >> pin_cpus=8,9 >> >> [worker-2] >> type=worker >> host=localhost >> interface=p1p2 >> lb_method=pf_ring >> lb_procs=2 >> pin_cpus=10,11 >> ---------------------------- >> >> >> but, I had wrong connection information. >> >> Most conn_state is SH or SHR in the conn.log file. >> >> How can I configure the node.cfg file? >> >> Thanks, >> Raphael >> _______________________________________________ >> Zeek mailing list >> [email protected] >> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek > _______________________________________________ > Zeek mailing list > [email protected] > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek