[Oisf-users] Custom logging module and packet order

Paul Apostolescu apbogdan at gmail.com
Thu Feb 11 20:32:42 UTC 2016


I'm looking to write a thread module to implement a custom packet logger
and I have a few questions:
1) are the packets received by a certain thread (same ThreadVars) belonging
to the same flows
2) are they received after they've been reordered

In other words do the flows have a logical thread affinity (they're not
spread across different logical threads) and are the packets for the flows
received in order.

Based on reading the docs looks like the answer is yes for both regardless
of the run mode.

Thanks
- Paul

PS: this is a thread module which registers itself as an output module
(OutputRegisterModule)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20160211/590c2b13/attachment.html>


More information about the Oisf-users mailing list