[Oisf-users] af-packet rollover

[Jason Holmes]

Hi,

I ran across the following comment a while ago about the rollover option 
for af-packet:

https://github.com/inliniac/suricata/commit/6ec1340cb771190083cd71ac360a85fdf54e8cdf

It says, "Rollover option is causing issue with TCP streaming code 
because packets from the same flow to be treated out of order. As long 
as the situation is not fixed in the streaming engine, it is a bad idea
to enable it by default."

Based on this comment, I've never enabled the rollover option.  Is it 
still the case that the rollover option causes issues in the streaming 
engine?

Thanks,

--
Jason Holmes