[Oisf-users] Question about using suricata 1.1rc1 with nfq

[carlopmart]

On 11/09/2011 11:51 AM, Victor Julien wrote:
> I think you're mixing a few things up:
>
> log-pcap: log packets to disk in pcap format, works for all methods of
> acquiring packets.
> pcap: settings for getting packets from the wire, passively. Not related
> to nfq or inline modes in general.
>
> For using nfq you can either use multiple queues by pass -q 0 -q 1, etc
> to suricata, or you can configure your iptables to send all the traffic
> to a single queue.
>
> Cheers,
> Victor
>

Ok, it is clear. Thanks Victor.



-- 
CL Martinez
carlopmart {at} gmail {d0t} com