[Oisf-users] Possible to have DAG & PF_RING devices simultaneously?

Brian Keefer chort at effu.se
Mon Jun 1 22:04:53 UTC 2015


According to https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Endace_DAG the way to enable DAG capture it to start suricata with --dag <DEVICE>. There does not appear to be a section in suricata.yaml to setup DAG devices (for example, how many threads to assign).

So I have two questions:
1. How to I tell Suricata how many threads to assign to a DAG device?
2. Is it possible to simultaneously using PF_RING and DAG devices on the same Suricata instance?


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20150601/cc274fc5/attachment.pgp>

More information about the Oisf-users mailing list