[Oisf-users] af_packet vs pfring

Russell Fulton r.fulton at auckland.ac.nz
Sun Jul 28 00:15:46 UTC 2013


The next decision I need to make is whether to use pf_ring or af_packet.  From what I can garner with google if you are just running suri on the sensor af_packet is flavour of the month.  However I have found references that suggest that if one wants to run other packages like argus and bro along side then pf_ring is preferred. 

Can anyone point me to a document that spells out the pros and cons of the two?

Thanks, Russell

More information about the Oisf-users mailing list