[Oisf-users] Suricata 1 Thread, Af_packet IPS

[Peter Manev]

On Sun, Nov 10, 2013 at 10:45 AM, Duarte Silva
<duarte.silva at serializing.me> wrote:
> Hi guys,
>
> in RHEL based Linux distributions (kernel 2.6.x) AF_PACKET does not have the
> packet fan out feature. Hence the necessary update to kernel 3.x.
>

Very true ! For AF_PACKET you need  3.0 level and up.