[Oisf-users] RHEL Kernel 3.1 to 4.x

[Peter Manev]

On Mon, Jan 23, 2017 at 9:07 PM, Andreas Herz <andi at geekosphere.org> wrote:
> On 23/01/17 at 16:01, Cloherty, Sean E wrote:
>> Fresh from Suricata training in Sunnyvale CA (Thanks Peter and Eric!) and looking to upgrade the kernel on my CentOS hosts.
>>
>> Assuming I follow the procedure of adding the elrepo repo and running the kernel upgrade -
>>
>> 1. What are the possible risks - what could break?
>
> That depends on what you're running on the machine, but most of the time
> there should be no breaks if you use the proper repo.
>
>> 2. Following upgrade to the kernel - are there any other requirements other than changing the default kernel to boot in GRUB?
>

You can always revert to a previously installed kernel through GRUB or
automate another default upon boot through - /etc/default/grub using
the "GRUB_DEFAULT" variable (at least in Debian/Ubuntu).


> This should be done by the package itself
>
>> 3. Which version is recommended?  4.7, 4.9 ?
>
> 4.9 might be good choice since it's going to be a LTS kernel

Dont forget to confirm with -
https://github.com/JustinAzoff/can-i-use-afpacket-fanout


>
>> Thanks.
>>
>> Sean Cloherty
>> InfoSec Engineer/Scientist, Lead
>> MITRE Corporation
>> office (781) 271-3707
>> cell      (781) 697-8043
>>
>
>> _______________________________________________
>> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
>> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
>> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>
>
> --
> Andreas Herz
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users



-- 
Regards,
Peter Manev