Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-07 09:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Allow Bro to run in fanout mode.

Browse source
This commit is contained in:
Kris Nielander 2015-08-09 22:41:28 +02:00
parent f5429ee794
commit d8c9b7255e
9 changed files with 88 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

16
src/iosource/pcap/Source.cc
View file

@ -84,13 +84,12 @@ void PcapSource::OpenLive()
props.netmask = PktSrc::NETMASK_UNKNOWN;
#endif
// We use the smallest time-out possible to return almost immediately if
// ### We use the smallest time-out possible to return almost immediately if
// no packets are available. (We can't use set_nonblocking() as it's
// broken on FreeBSD: even when select() indicates that we can read
// something, we may get nothing if the store buffer hasn't filled up
// yet.)
pd = pcap_create(props.path.c_str(), errbuf);
if ( ! pd )
{
safe_snprintf(errbuf, sizeof(errbuf),
@ -160,6 +159,19 @@ void PcapSource::OpenLive()
// Was closed, couldn't get header size.
return;
#ifdef HAVE_PACKET_FANOUT
/* Turn on cluster mode for the device. */
if ( fanout_enable )
{
uint32_t fanout_arg = (fanout_method << 16) | (fanout_id & 0xffff);
if (setsockopt(props.selectable_fd, SOL_PACKET, PACKET_FANOUT, &fanout_arg, sizeof(fanout_arg)) == -1)
{
Error(fmt("%s: setsockopt: %s", __FUNCTION__, strerror(errno)));
return;
}
}
#endif
props.is_live = true;
Opened(props);