rita
rita copied to clipboard
Compile Bro from source with PF_RING support
We already offer this script to help install a more performant version of Bro. https://github.com/activecm/bro-install
We should modify the RITA installer to use bro-install to compile bro from source with pf_ring support. I know there are a lot of things that can go wrong with this so we should put in checks that test for a successful install and warn the user if it fails and fallback onto the current package manager version of bro.
Compiling Bro from source will be a prerequisite of utilizing the bro-rita plugin as well.