[Oisf-users] suricata pf_ring inline

[Victor Julien]

On 08/31/2015 08:15 PM, Pedro Neves wrote:
> Is this possible to have suricata working inline with pf_ring ?
> Or for Inline, NFQUEUE has to be used ?

Not at this time. Some work is being done to enable PF_RING IPS, but
it's not complete yet.

You can use a AF_PACKET bridge though:
https://home.regit.org/2012/09/new-af_packet-ips-mode-in-suricata/

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------