[Oisf-users] PFRING BPF filter not being enabled

[Eric Leblond]

Hello,


On Thu, 2014-09-11 at 17:46 -0400, Adnan Baykal wrote:
> hi guys,
> 
> I have PF_RING 5.6.2 running and I compiled it the lib with
> --enable-bpf and recompiled libpcap as well as suricata. when running
> suricata and threads are created, I cat the contents of
> /proc/net/pf_ring/xxx and I see that bpf is disabled and any bpf
> filter I put in the yaml fails to apply.

How do you start suricata ? and what is your YAML configuration
regarding pf_ring ?

BR,
-- 
Eric Leblond <eric at regit.org>