Installing and configuring Bro for Napatech Link™ Capture Software.
Bro is an open source Unix-based network monitoring framework.
- Bro can be installed from binary packages and use libpcap interfaces to Napatech Link™ Capture Software.
- To get optimal performance, install a Napatech packet source plugin for Bro.
Find a suitable precompiled Bro package for your OS distribution. See Installing and Running libpcap Applications for general information about how to install and use package-based applications with Napatech libpcap.
See DN-0428 for more information about configuration of Napatech libpcap.
For general information about installation of Bro, see https://www.bro.org/sphinx/install/install.html.
For installation instructions for specific Bro versions, see the INSTALL file in the Bro package.
To use the Napatech interfaces, edit the node.cfg file according to your specific configuration.
# Example BroControl node configuration. # # This is a complete standalone configuration. Most likely you # only need to change the interface. # [bro] # type=standalone # host=localhost # interface=napa0 ## Below is an example clustered configuration. If you use this, ## remove the [bro] node above. [manager] type=manager host=localhost [proxy-1] type=proxy host=localhost [worker-1] type=worker host=localhost interface=napa0 [worker-2] type=worker host=localhost interface=napa1
Napatech packet source plugin for Bro
Bro site: https://www.bro.org/
Bro source: https://github.com/bro
Bro documentation: https://www.bro.org/documentation/index.html
Bro installation from source: https://www.bro.org/sphinx/install/install.html
Bro binary packages: https://www.bro.org/download/packages.html
Bro Package Manager documentation: http://bro-package-manager.readthedocs.io/en/stable/
Napatech packet source plugin for Bro: https://github.com/hosom/bro-napatech