Bro

Installation and Use of Napatech Link™ Capture Software for Intel® PAC with Intel® Arria® 10 GX FPGA
Platform
Content Type
Quick Guide
Capture Software Version
Link™ Capture Software 12.3

Installing and configuring Bro for Napatech Link™ Capture Software.

Introduction

Bro is an open source Unix-based network monitoring framework.

Bro can be installed for use with Napatech Link™ Capture Software in two ways:
  • Bro can be installed from binary packages and use libpcap interfaces to Napatech Link™ Capture Software.
  • To get optimal performance, install a Napatech packet source plugin for Bro.

Package-based installation

Find a suitable precompiled Bro package for your OS distribution. See Installing and Running libpcap Applications for general information about how to install and use package-based applications with Napatech libpcap.

See DN-0428 for more information about configuration of Napatech libpcap.

For general information about installation of Bro, see https://www.bro.org/sphinx/install/install.html.

For installation instructions for specific Bro versions, see the INSTALL file in the Bro package.

To use the Napatech interfaces, edit the node.cfg file according to your specific configuration.

This example sets up a 2-node cluster that listens on the Napatech pcap devices napa0 and napa1. This configuration works with the default ntpcap.ini file.
# Example BroControl node configuration.
#

# This is a complete standalone configuration.  Most likely you 
# only need to change the interface.
# [bro]
# type=standalone
# host=localhost
# interface=napa0

## Below is an example clustered configuration. If you use this,
## remove the [bro] node above.

[manager]
type=manager
host=localhost

[proxy-1]
type=proxy
host=localhost

[worker-1]
type=worker
host=localhost
interface=napa0

[worker-2]
type=worker
host=localhost
interface=napa1

Napatech packet source plugin for Bro

Building and running Bro with Napatech support involves the following steps:

Related links

Bro site: https://www.bro.org/

Bro source: https://github.com/bro

Bro documentation: https://www.bro.org/documentation/index.html

Bro installation from source: https://www.bro.org/sphinx/install/install.html

Bro binary packages: https://www.bro.org/download/packages.html

Bro Package Manager documentation: http://bro-package-manager.readthedocs.io/en/stable/

Napatech packet source plugin for Bro: https://github.com/hosom/bro-napatech