[Oisf-users] DAG integration, massive number of checksum failures

[Brian Keefer]

Hoping someone will have tips. I have have a DAG 9.2X2 with 10G fiber on each port (A & B). The aggregate is about 5Gbps right now. slen is set to 9728 for each stream, although I don’t think the actual network has any jumbo frames.

Suricata is generating a massive amount of invalid checksum alerts across every protocol, similar to what it would look like on a copper card if checksum offloading was enabled on the card. The problem is I can’t find any option on the DAG card to disable checksum calculation for RX packets (there are options for TX, but I think that only applies to packets it’s replaying back onto the wire).

Hints?

--
bk



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20151009/6378c7d2/attachment.pgp>