[Oisf-users] What is cluster-id need for ?

[oleg gv]

Hello, in suricata afp mode we need to set cluster-id for each of paired
interfaces that used in afp.

For example we have such config (simplified):

afp:
  iface eth0:
      copy-to eth1
      cluster-id 1
   iface eth1
       copy-to eth0
       cluster-id 2

What if I set the same cluster-id (e.g. 1) for both interfaces ? Or it must
differ?

On what things this influence?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20160831/5ab3f9de/attachment.html>