Re: Manager, Proxy and Worker all logging the same notice to notice.log
Justin Azoff <[email protected]> Thu, 26 Dec 2019 19:00:53 -0500
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAPfnCuh9ny8Fowx5faUw=cnxEgr0UnCmMWDqO=VZsj17BojiNw@mail.gmail.com> |
--===============1986708471== Content-Type: multipart/alternative; boundary="000000000000180472059aa43216" --000000000000180472059aa43216 Content-Type: text/plain; charset="UTF-8" On Thu, Dec 26, 2019 at 6:01 PM Denny Sabu <[email protected]> wrote: > node.cfg is as follows: > > [manager] > type=manager > host=localhost > interface=enp101s0f1 > > [proxy-1] > type=proxy > host=localhost > interface=enp101s0f1 > > [worker-1] > type=worker > host=localhost > interface=enp101s0f1 > lb_method=pf_ring > lb_procs=16 > pin_cpus=4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 > You've told the manager and proxy to capture from enp101s0f1.. remove those lines and this problem will go away. Also, you should add a logger section. -- Justin --000000000000180472059aa43216 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div dir=3D"ltr">On Thu, Dec 26, 2019 at 6:01 PM Denny Sab= u <<a href=3D"mailto:[email protected]">[email protected]</a>>= ; wrote:<br></div><div class=3D"gmail_quote"><blockquote class=3D"gmail_quo= te" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204= );padding-left:1ex"> <div dir=3D"ltr"> <div style=3D"font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt= ;color:rgb(0,0,0)"> node.cfg is as follows:</div> <div style=3D"font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt= ;color:rgb(0,0,0)"> <br> </div> <div style=3D"font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt= ;color:rgb(0,0,0)"> <span>[manager]<br> </span> <div>type=3Dmanager<br> </div> <div>host=3Dlocalhost<br> </div> <div>interface=3Denp101s0f1</div> <div><br> </div> <div>[proxy-1]<br> </div> <div>type=3Dproxy<br> </div> <div>host=3Dlocalhost<br> </div> <div>interface=3Denp101s0f1</div> <div><br> </div> <div>[worker-1]<br> </div> <div>type=3Dworker<br> </div> <div>host=3Dlocalhost<br> </div> <div>interface=3Denp101s0f1<br> </div> <div>lb_method=3Dpf_ring<br> </div> <div>lb_procs=3D16<br> </div> <span>pin_cpus=3D4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19</span></div> <div style=3D"font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt= ;color:rgb(0,0,0)"><span style=3D"font-family:Arial,Helvetica,sans-serif;fo= nt-size:small;color:rgb(34,34,34)"></span></div></div></blockquote><div><br= ></div><div>You've told the manager and proxy to capture from enp101s0f= 1.. remove those lines and this problem will go away.=C2=A0 Also, you shoul= d add a logger section.</div><div>=C2=A0</div></div>-- <br><div dir=3D"ltr"= class=3D"gmail_signature"><div dir=3D"ltr">Justin</div></div></div> --000000000000180472059aa43216-- --===============1986708471== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek --===============1986708471==--