[Oisf-users] PFRING BPF filter not being enabled

Eric Leblond eric at regit.org
Thu Sep 11 22:24:55 UTC 2014


On Thu, 2014-09-11 at 17:46 -0400, Adnan Baykal wrote:
> hi guys,
> I have PF_RING 5.6.2 running and I compiled it the lib with
> --enable-bpf and recompiled libpcap as well as suricata. when running
> suricata and threads are created, I cat the contents of
> /proc/net/pf_ring/xxx and I see that bpf is disabled and any bpf
> filter I put in the yaml fails to apply.

How do you start suricata ? and what is your YAML configuration
regarding pf_ring ?

Eric Leblond <eric at regit.org>

More information about the Oisf-users mailing list