[Oisf-users] Using "pass" to ignore research data traffic

[Peter Manev]

>
> That's made a huge difference! I'd just resorted to using PF_RING via
> libpcap (where the BPF filters may work) which seemed to be doing a bit
> better. Putting in your patch and going back to direct PF_RING is
> dropping almost no packets at 1.2Gb/s.
>
> Chris  - what is your HW set up, if you don't mind me asking?


> Best Wishes,
> Chris
>
> --
> --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+-
> Christopher Wakelin,                           c.d.wakelin at reading.ac.uk
> IT Services Centre, The University of Reading,  Tel: +44 (0)118 378 2908
> Whiteknights, Reading, RG6 6AF, UK              Fax: +44 (0)118 975 3094
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/
>



-- 
Regards,
Peter Manev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20130115/c61cec36/attachment-0002.html>