{"id":20579983,"url":"https://github.com/ntop/bro-pf_ring","last_synced_at":"2025-07-02T02:05:47.598Z","repository":{"id":50309406,"uuid":"97524432","full_name":"ntop/bro-pf_ring","owner":"ntop","description":"Zeek (formerly Bro) plugin to capture packets through PF_RING","archived":false,"fork":false,"pushed_at":"2020-04-20T10:53:27.000Z","size":17,"stargazers_count":227,"open_issues_count":2,"forks_count":12,"subscribers_count":7,"default_branch":"master","last_synced_at":"2025-04-08T04:51:23.434Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ntop.png","metadata":{"files":{"readme":"README","changelog":null,"contributing":null,"funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-07-17T21:35:45.000Z","updated_at":"2025-03-06T17:22:08.000Z","dependencies_parsed_at":"2022-09-11T23:11:30.352Z","dependency_job_id":null,"html_url":"https://github.com/ntop/bro-pf_ring","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/ntop/bro-pf_ring","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ntop%2Fbro-pf_ring","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ntop%2Fbro-pf_ring/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ntop%2Fbro-pf_ring/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ntop%2Fbro-pf_ring/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ntop","download_url":"https://codeload.github.com/ntop/bro-pf_ring/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ntop%2Fbro-pf_ring/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":263061404,"owners_count":23407606,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-16T06:19:27.660Z","updated_at":"2025-07-02T02:05:47.567Z","avatar_url":"https://github.com/ntop.png","language":"C++","funding_links":[],"categories":[],"sub_categories":[],"readme":"\nBro::PF_RING\n============\n\nThis plugin provides native `PF_RING \u003chttp://www.ntop.org\u003e` support for Bro.\n\nBro-pkg Installation\n--------------------\n\nMake sure you have the PF_RING library installed and then run:\n\n    bro-pkg install ntop/bro-pf_ring\n\nManual Installation\n-------------------\n\nFollow PF_RING's instructions to get its kernel module, drivers and userspace libraries installed,\nthen use the following commands to configure and build the plugin.\n\nAfter building bro from the sources, change to the \"bro-pf_ring\" directory and run:\n\n    ./configure --with-pfring=\u003cPF_RING base directory\u003e --bro-dist=\u003cpath to bro sources\u003e\n    make \u0026\u0026 sudo make install\n\nIf everything built and installed correctly, you should see this:\n\n    bro -N Bro::PF_RING\n    Bro::PF_RING - Packet acquisition via PF_RING\n\nUsage\n-----\n\nOnce installed, you can use PF_RING interfaces/ports by prefixing them\nwith ``pf_ring::`` on the command line. For example, to use PF_RING to\nmonitor interface ``eth1``:\n\n    bro -i pf_ring::eth1\n\nTo use it in production with multiple Bro processes, use a configuration \nsimilar to this in node.cfg (e.g. /usr/local/bro/etc/node.cfg):\n\n    [worker-1]\n    type=worker\n    host=localhost\n    interface=pf_ring::zc:eth1\n    lb_method=pf_ring\n    lb_procs=8\n    pin_cpus=0,1,2,3,4,5,6,7\n\nWhere lb_procs is the number of processes for load balancing (e.g. RSS)\nNow start the BroControl shell like:\n\n    broctl\n\nThe first-time, perform an initial installation of the BroControl configuration:\n\n    [BroControl] \u003e install\n\nThen start the Bro instances:\n\n    [BroControl] \u003e start\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fntop%2Fbro-pf_ring","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fntop%2Fbro-pf_ring","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fntop%2Fbro-pf_ring/lists"}