<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><div class="">Hello,</div><div class="">If any of you are using suricata with nflog as capture method, I would like to let you know</div><div class="">that recently I’ve made some changes at nflog replacing its old api with libmnl,</div><div class="">a minimalistic netlink library developed by Netfilter organisation:</div><div class=""><a href="https://netfilter.org/projects/libmnl/index.html" class="">https://netfilter.org/projects/libmnl/index.html</a></div><div class=""><br class=""></div><div class="">It’s a hard dependency if you enable nflog, so before building suricata you must install it.</div><div class=""><br class=""></div><div class="">I kindly ask to whom is using nflog to give it a test if possible and give some feedback,</div><div class="">I’ve had it running for few days now in my home network, with a buffer-size set to 65535</div><div class="">and it’s working fine.</div><div class="">You can find the PR here: <a href="https://github.com/OISF/suricata/pull/4423" class="">https://github.com/OISF/suricata/pull/4423</a></div><div class=""><br class=""></div><div class="">Do not hesitate to contact me if you need help or have any questions.</div></div><div class=""><br class=""></div><div class="">Cheers,</div><div class="">Giuseppe</div></div></body></html>