[Oisf-devel] suricata & two-way traffic

[Eric Leblond]

Hi,

On Wed, 2014-07-16 at 14:20 +0430, Mahnaz Talebi wrote:
> sorry for my low accuracy. 
> 
> correct my af-packet section is:
> af-packet:
>   - interface: p115p4
>      threads: 8
>      cluster-id: 99
>      cluster-type: cluster_cpu
>      defrag: yes
>     use-mmap: yes
>     ring-size: 5000
>     buffer-size: 262144
>    copy-mode: ips   
>    copy-iface: p115p3
>    - interface: p115p3
>     threads: 8
>     cluster-id: 98
>     cluster-type: cluster_cpu
>     defrag: yes
>     use-mmap: yes
>     ring-size: 5000
>     buffer-size: 262144

copy-iface and copy-mode are missing on second interface.

So transmission goes only one side

BR,

> 
> 
> _______________________________________________
> Suricata IDS Devel mailing list: oisf-devel at openinfosecfoundation.org
> Site: http://suricata-ids.org | Participate: http://suricata-ids.org/participate/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel
> Redmine: https://redmine.openinfosecfoundation.org/

-- 
Eric Leblond <eric at regit.org>