[Oisf-users] Custom logging module and packet order
Paul Apostolescu
apbogdan at gmail.com
Thu Feb 11 20:32:42 UTC 2016
I'm looking to write a thread module to implement a custom packet logger
and I have a few questions:
1) are the packets received by a certain thread (same ThreadVars) belonging
to the same flows
2) are they received after they've been reordered
In other words do the flows have a logical thread affinity (they're not
spread across different logical threads) and are the packets for the flows
received in order.
Based on reading the docs looks like the answer is yes for both regardless
of the run mode.
Thanks
- Paul
PS: this is a thread module which registers itself as an output module
(OutputRegisterModule)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20160211/590c2b13/attachment.html>
More information about the Oisf-users
mailing list