[Oisf-devel] [PATCH 0/2] lighten Packet structure v2

Eric Leblond eleblond at edenwall.com
Thu Nov 18 13:35:56 UTC 2010


Hi,

Le jeudi 18 novembre 2010 à 14:30 +0100, Victor Julien a écrit :
> Robert Kerr wrote:
> > On Tue, 2010-11-16 at 23:00 +0100, Eric Leblond wrote:
> >> Hi,
> > 
> >> Here's a new version of the patchset which mainly does a renaming
> >> of the function and increase the maximum packet size to 1514.
> > 
> > I don't know if this is possible without adding to the complexity of
> > things a lot, but could this max packet size be configured at runtime?
> > 
> > It seems clear that the value should be either the same as or slightly
> > higher than the MTU of the link suricata is monitoring. The problem is
> > this may not be known at compile time - by fixing at 1514 you optimise
> > for ethernet, but there are various other possibilities. SONET has an
> > MTU around the 4000 mark, as does FDDI, and ethernet with jumbo frames
> > is vendor specific but often around the 9000 mark.
> 
> I agree with you Robert, this would be very useful.

I will try to do something, this is really true that recompiling
suricata to have good performance on jumbo frame is not something
exiting.

BR,
-- 
Éric Leblond, eleblond at edenwall.com
Téléphone : +33 1 40 24 65 04, Fax : +33 9 57 21 48 75
EdenWall, http://www.edenwall.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: Ceci est une partie de message numériquement signée
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-devel/attachments/20101118/bc7a27ce/attachment.sig>


More information about the Oisf-devel mailing list