[Oisf-devel] [COMMIT] OISF branch, master, updated. suricata-1.4-38-g2f0927f

noreply at openinfosecfoundation.org noreply at openinfosecfoundation.org
Thu Feb 21 10:15:42 UTC 2013

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "OISF".

The branch, master has been updated
       via  2f0927fe9b9d53714636ce8e25939f518fc8f702 (commit)
       via  e14a817fbd16dd1c447ed21a061853e956169c1e (commit)
       via  786cbb12442e8fd7aebdcc22c6c678364776c3e1 (commit)
       via  e8aa66a44cd3eb222b0f5e1d6ed21af4918fda1b (commit)
       via  1aaa828b63f8c4528f3632f52d8576761c9f0dc1 (commit)
      from  cc51eec59dfd1e9294b13fc85f462d7816542f46 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 2f0927fe9b9d53714636ce8e25939f518fc8f702
Author: Eric Leblond <eric at regit.org>
Date:   Fri Feb 15 16:11:47 2013 +0100

    pcap: add snaplen YAML variable
    This patch introduces 'snaplen' a new YAML variable in the pcap section.
    It can be set per-interface to force pcap capture snaplen. If not set
    it defaults to interface MTU if MTU can be known via a ioctl call and to
    full capture if not.

commit e14a817fbd16dd1c447ed21a061853e956169c1e
Author: Eric Leblond <eric at regit.org>
Date:   Fri Dec 14 08:47:28 2012 +0100

    pfring: delete unused define.

commit 786cbb12442e8fd7aebdcc22c6c678364776c3e1
Author: Eric Leblond <eric at regit.org>
Date:   Thu Dec 13 16:49:37 2012 +0100

    log-pcap: don't limit snaplen.

commit e8aa66a44cd3eb222b0f5e1d6ed21af4918fda1b
Author: Eric Leblond <eric at regit.org>
Date:   Fri Feb 15 12:15:07 2013 +0100

    pcap: add 'promisc' YAML configuration variable
    This patch adds a promisc variable to pcap configuration. It is
    used to decided if interface is switched to promiscuous mode.

commit 1aaa828b63f8c4528f3632f52d8576761c9f0dc1
Author: Eric Leblond <eric at regit.org>
Date:   Fri Feb 15 12:10:25 2013 +0100

    pcap: set snaplen to MTU if available.
    Main objective of this patch is to use a dynamic snaplen to avoid
    to truncate packet at the currently fixed snaplen.
    It set snaplen to MTU length if the MTU can be retrieved. If not, it
    does not set the snaplen which results in using a 65535 snaplen.
    libpcap is trying to use mmaped capture and setup the ring by using buffer_size
    as the total memory. It also use "rounded" snaplen as frame size. So if we set
    snaplen to MTU when available we are optimal regarding the building of the ring.


Summary of changes:
 src/log-pcap.c      |    2 +-
 src/runmode-pcap.c  |   17 +++++++++++++++++
 src/source-pcap.c   |   29 ++++++++++++++++++++---------
 src/source-pcap.h   |    6 ++++--
 src/source-pfring.c |    1 -
 suricata.yaml.in    |   10 +++++++++-
 6 files changed, 51 insertions(+), 14 deletions(-)


More information about the Oisf-devel mailing list