[Oisf-users] Possible to have DAG & PF_RING devices simultaneously?

[Brian Keefer]

On Jun 2, 2015, at 8:42 AM, Victor Julien <lists at inliniac.net> wrote:

> Signed PGP part
> On 06/02/2015 05:19 PM, Brian Keefer wrote:
> 
> > I guess I didn’t explain the question very well.
> >
> > I have a machine with 2 cards: A quad I350 Intel card, and a dual
> > Endance card. Currently I have several 1Gb copper connections to
> > the Intel card, which is setup with Suricata via PF_RING. I’m
> > planning to connect the DAG to a 10Gb fiber feed. I’m wondering if
> > the same Suricata instance can handle input from both
> > simultaneously (still using PF_RING for the Intel card, but using
> > DAG for the Endace card).
> 
> No you can't. Not much in the way technically, other than the setup of
> our runmodes. But considering how rare such a setup is, I'm not
> interested in spending resources on it :)
> 
> --
> ---------------------------------------------
> Victor Julien
> http://www.inliniac.net/
> PGP: http://www.inliniac.net/victorjulien.asc
> ——————————————————————

OK, thanks for the confirmation. I agree it’s probably uncommon. We’re only trying it because of the transition from 1G to 10G network core.

—
bk

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20150602/3a6a756c/attachment.sig>