Re: Manager, Proxy and Worker all logging the same notice to notice.log

Justin Azoff <[email protected]> Thu, 26 Dec 2019 19:00:53 -0500
Newsgroups gmane.comp.security.detection.bro
Message-ID <CAPfnCuh9ny8Fowx5faUw=cnxEgr0UnCmMWDqO=VZsj17BojiNw@mail.gmail.com>
--===============1986708471==
Content-Type: multipart/alternative; boundary="000000000000180472059aa43216"

--000000000000180472059aa43216
Content-Type: text/plain; charset="UTF-8"

On Thu, Dec 26, 2019 at 6:01 PM Denny Sabu <[email protected]> wrote:

> node.cfg is as follows:
>
> [manager]
> type=manager
> host=localhost
> interface=enp101s0f1
>
> [proxy-1]
> type=proxy
> host=localhost
> interface=enp101s0f1
>
> [worker-1]
> type=worker
> host=localhost
> interface=enp101s0f1
> lb_method=pf_ring
> lb_procs=16
> pin_cpus=4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
>

You've told the manager and proxy to capture from enp101s0f1.. remove those
lines and this problem will go away.  Also, you should add a logger section.

-- 
Justin

--000000000000180472059aa43216
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">On Thu, Dec 26, 2019 at 6:01 PM Denny Sab=
u &lt;<a href=3D"mailto:[email protected]">[email protected]</a>&gt=
; wrote:<br></div><div class=3D"gmail_quote"><blockquote class=3D"gmail_quo=
te" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204=
);padding-left:1ex">




<div dir=3D"ltr">
<div style=3D"font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt=
;color:rgb(0,0,0)">
node.cfg is as follows:</div>
<div style=3D"font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt=
;color:rgb(0,0,0)">
<br>
</div>
<div style=3D"font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt=
;color:rgb(0,0,0)">
<span>[manager]<br>
</span>
<div>type=3Dmanager<br>
</div>
<div>host=3Dlocalhost<br>
</div>
<div>interface=3Denp101s0f1</div>
<div><br>
</div>
<div>[proxy-1]<br>
</div>
<div>type=3Dproxy<br>
</div>
<div>host=3Dlocalhost<br>
</div>
<div>interface=3Denp101s0f1</div>
<div><br>
</div>
<div>[worker-1]<br>
</div>
<div>type=3Dworker<br>
</div>
<div>host=3Dlocalhost<br>
</div>
<div>interface=3Denp101s0f1<br>
</div>
<div>lb_method=3Dpf_ring<br>
</div>
<div>lb_procs=3D16<br>
</div>
<span>pin_cpus=3D4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19</span></div>
<div style=3D"font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt=
;color:rgb(0,0,0)"><span style=3D"font-family:Arial,Helvetica,sans-serif;fo=
nt-size:small;color:rgb(34,34,34)"></span></div></div></blockquote><div><br=
></div><div>You&#39;ve told the manager and proxy to capture from enp101s0f=
1.. remove those lines and this problem will go away.=C2=A0 Also, you shoul=
d add a logger section.</div><div>=C2=A0</div></div>-- <br><div dir=3D"ltr"=
 class=3D"gmail_signature"><div dir=3D"ltr">Justin</div></div></div>

--000000000000180472059aa43216--

--===============1986708471==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
--===============1986708471==--