[Oisf-users] af_packet vs pfring
r.fulton at auckland.ac.nz
Sun Jul 28 00:15:46 UTC 2013
The next decision I need to make is whether to use pf_ring or af_packet. From what I can garner with google if you are just running suri on the sensor af_packet is flavour of the month. However I have found references that suggest that if one wants to run other packages like argus and bro along side then pf_ring is preferred.
Can anyone point me to a document that spells out the pros and cons of the two?
More information about the Oisf-users