[Oisf-devel] suricata & two-way traffic

[Mahnaz Talebi]

Dear Peter,
my af-packet  section in suricata.yaml looks like this:
af-packet:
  - interface: p115p4
     threads: 8
     cluster-id: 99
     cluster-type: cluster_cpu
     defrag: yes
    use-mmap: yes
    ring-size: 5000
    buffer-size: 262144
    interface: p115p3
    threads: 8
    cluster-id: 98
    cluster-type: cluster_cpu
    defrag: yes
    use-mmap: yes
    ring-size: 5000
    buffer-size: 262144
   copy-mode: ips
   copy-iface: p115p4
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-devel/attachments/20140716/e191b7d0/attachment-0002.html>