<html><body><div id="edo-message"><div></div>Hello Breno</div><div id="edo-message"><br></div><div id="edo-message">Sorry if I have missed an earlier communication, but what does “sometimes it doesn’t work very well” mean? Could you be more specific please?</div><div id="edo-message"><br></div><div id="edo-message">Thank you</div><div id="edo-message"><br></div><div id="edo-message">Amar</div><div id="edo-message">Making sense of Technology</div><div id="edo-meta"></div><div id="edo-original"><div><br><br><blockquote type="cite" style="margin:1ex 0 0 0;border-left:1px #ccc solid;padding-left:0.5ex;"><div>On Mar 28, 2019 at 2:32 AM, <<a href="mailto:breno.silva@gmail.com">Breno Silva</a>> wrote:<br><br></div><div><div dir="ltr">Hello all,<div><br></div><div>I have an appliance where multiple interfaces are configured in bridge (ie. br0) mode. Trying to run suricata inline (nfq) on a bridged applicance sometimes doesn't work very well for and looks like it is a known issue for years. I cannot use afpacket/netmap or other "true" bridge approached. Must continue with nfqueue,</div><div><br></div><div>Do we have any update on this topic? some solution?</div><div>I heard Victor saying it is a netfilter issue, do we have any feedback from netfilter core team ?</div><div><br></div><div>Thinking about the possibility to use ebtables with some nfqueue support. Should be possible ?</div><div><br></div><div>Thanks</div></div>
</div></blockquote></div></div></body></html>