[Oisf-users] Disable offloading on bond interface

[Liao Zhuodi]

I think maybe you can test for both or each one, if package maximum size is more than 1500 bytes, I guess it should not work that way.


Liao
------------------ Original ------------------
From:  "Cooper F. Nelson";<cnelson at ucsd.edu>;
Date:  Jan 28, 2015
To:  "unite"<unite at openmailbox.org>; "Oisf Users"<oisf-users at lists.openinfosecfoundation.org>; 

Subject:  Re: [Oisf-users] Disable offloading on bond interface



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The offloading happens in hardware on the physical network interface, so
it should be disable there.  As far as I know the bonded interface is a
virtual device and those settings shouldn't even be available.

On 1/26/2015 5:41 AM, unite wrote:
> Hi guys!
> 
> I've read that to achieve the best results using suricata, I need to
> disable offloading on my interfaces. The problem is that I have two
> interfaces bonded for redundancy and so, should I just disable
> offloading separately on physical interfaces (eth0/eth1) or only on bond
> interface or on both?
> 
> Thanks in advance.
> 


- -- 
Cooper Nelson
Network Security Analyst
UCSD ACT Security Team
cnelson at ucsd.edu x41042
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJUx9WhAAoJEKIFRYQsa8FWTKgIALL0I8ombJzcOvWZZwz9EVJR
UyUMnqnJ9J+Wqx8VGZjlBb2ZL5PjI/pghqeuEngMkF6gqQivZCIWBj9P/4JmjV75
JPvwtcQqFG74Wxj/zOnnrXqOxrwx9HGQ8Mj1J7+xBEiCmDI2VHpjPEciX+flu8Y/
DFJ1mvmx9MChag3us4e8Ue2PUx4GAw0qawdDFgFHtD2VsFokQ6NOFq7xqX9i7D0v
gSdanJaqe6VonZIucQf2581FIsbDiYSHcUdXsJ+aiUKgUhH/O5Nh0HEtSwKnC4Kk
3ytqXjBcs7nlHelnjVHkwpHXpUnYHiTPswCXfPsMfZvGzZDoZA4XXQDN7EsSas8=
=b0Gm
-----END PGP SIGNATURE-----
_______________________________________________
Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
Training now available: http://suricata-ids.org/training/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20150128/af483057/attachment-0002.html>