[Oisf-users] Suricata with PF_RING on latest git

Victor Julien victor at inliniac.net
Fri Jul 6 08:21:05 UTC 2012

On 07/06/2012 10:17 AM, Anoop Saldanha wrote:
>>> And I can verify, if you run pfring, it wont die if you dont send
>>> >> packets.
>> >
>> > Yeah, no packets, no shutdown. Blame pfring :)
>> >
> Maybe wait for 'x' seconds an if it hasn't shutdown as yet, inject a
> packet to trigger shutdown.

That would be injecting on the wire, and then even account for the
number of reader threads and the various cluster options. Way too
complicated IMO.

I think Luca was working on a timeout feature at some point, not sure
what the status is.

Victor Julien
PGP: http://www.inliniac.net/victorjulien.asc

More information about the Oisf-users mailing list