[Oisf-users] Consequences of PF_RING enable_tx_capture=0?

[David Kay]

Hello all,

Will there be any problems or performance implications when Suricata
encounters a $HOME_NET->$EXTERNAL_NET tx rule? Should I parse my rules
to remove them all, or will it not make much of a difference? (Only a
small percentage of my rules currently are of this type.)

-- 
David Kay

Tuesday, June 07, 2011, 11:31:12 AM Eastern Standard Time