[Oisf-users] Packets stucked in Nfqueue when running inline

Fernando Ortiz fernando.ortiz.f at gmail.com
Tue Jun 21 19:30:09 UTC 2011


Probably, not quite sure. I will capture packets as soon as packets begin
getting stucked again (It is not an all day problem) I would analize it and
return to you. Just for curious, why, does it matter?


2011/6/21 Dave Remien <dave.remien at gmail.com>

> That's all new enough that the old "stuck packet" problem shouldn't be
> reappearing (was a problem up until about 2.6.21 or 22).
>
> Could you try running two instances of Suricata, one on each queue, rather
> than a single instance on two queues?
>
> As a separate thing, do you have tunnels crossing the IPS that have traffic
> being inspected?
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20110621/d61b7dc4/attachment-0002.html>


More information about the Oisf-users mailing list