[Oisf-users] Napatech support in Suricata: thread configuration and flow pinning

[Stefano Debenedetti]

> Date: Thu, 13 Dec 2012 12:17:41 -0500
> From: Matthew Keeler <mk at npulsetech.com>
> To: Stefano Debenedetti <ste at demaledetti.net>
> Cc: oisf-users at openinfosecfoundation.org
> Subject: Re: [Oisf-users] Napatech support in Suricata: thread
> 	configuration	and flow pinning
> Message-ID: <1E5C9C1A-C3FA-4138-A1FE-6B308F3F9C0A at npulsetech.com>
> Content-Type: text/plain; charset="us-ascii"
> 
> Yes, the autofp run mode is probably more in line with what you want. In that scenario it should still spawn 1 acquisition thread per stream, but the number of detect threads not be tied to it and should spawn many more threads.


What would the configuration look like for achieving this?


Thank you ciao
ste