It is, unfortunately, impossible to tell, without you telling us how
it failed and what the error messages were. I will take a wild guess -
you need to specify a different cluster ID for each card.
The original code here
And it tells how to do that with
On Mon, Jan 28, 2019 at 11:26 AM Carlos Lopez <clopmz(a)outlook.com> wrote:
Is not posible to start a zeek's worker with two network interfaces using AF_Packet
as a data acquisition? I have tried using the following config:
... But fails. And I have tried using " interface=' af_packet::eth2 -i
af_packet::eth3' and it doesn't work also ... So, is it not possible to use
af_packet to sniff two nics?
I am using Zeek 2.6.1 with af_packet plugin installed.
C. L. Martinez
Zeek mailing list