[Oisf-users] Installing suricata + vPF_RING as a vmware guest

[C. L. Martinez]

Hi all,

 I need to monitor a virtual guest subnet configured in two ESXi 5.1
hosts .... Virtual switches are configured to use 1Gb speed. My idea
is to use suricata + PF_RING to catch all http, smtp, ftp, and ssh
traffic only. But I have some doubts:

a) What nic driver is recommended in this scenario: vmxnet3 or e1000
to use with pf_ring??
b) What are the steps to install vPF_RING??
c) Do I need to use libpcap provided by pf_ring or can I use default
libraries provided by the OS (in my case, CentOS 6.3 64-bit)?

Many thanks for your help.