[Oisf-users] Question about using suricata 1.1rc1 with nfq

carlopmart carlopmart at gmail.com
Wed Nov 9 15:51:09 UTC 2011

On 11/09/2011 11:51 AM, Victor Julien wrote:
> I think you're mixing a few things up:
> log-pcap: log packets to disk in pcap format, works for all methods of
> acquiring packets.
> pcap: settings for getting packets from the wire, passively. Not related
> to nfq or inline modes in general.
> For using nfq you can either use multiple queues by pass -q 0 -q 1, etc
> to suricata, or you can configure your iptables to send all the traffic
> to a single queue.
> Cheers,
> Victor

Ok, it is clear. Thanks Victor.

CL Martinez
carlopmart {at} gmail {d0t} com

More information about the Oisf-users mailing list