[Oisf-users] Consequences of PF_RING enable_tx_capture=0?

David Kay hachirota at gmail.com
Mon Jun 13 22:18:43 UTC 2011

Hello all,

Will there be any problems or performance implications when Suricata
encounters a $HOME_NET->$EXTERNAL_NET tx rule? Should I parse my rules
to remove them all, or will it not make much of a difference? (Only a
small percentage of my rules currently are of this type.)

David Kay

Tuesday, June 07, 2011, 11:31:12 AM Eastern Standard Time

More information about the Oisf-users mailing list