[Oisf-users] af_packet vs pfring

[Russell Fulton]

Hi

The next decision I need to make is whether to use pf_ring or af_packet.  From what I can garner with google if you are just running suri on the sensor af_packet is flavour of the month.  However I have found references that suggest that if one wants to run other packages like argus and bro along side then pf_ring is preferred. 

Can anyone point me to a document that spells out the pros and cons of the two?

Thanks, Russell