[Oisf-users] af_packet and rss queue count

[Cloherty, Sean E]

Will this patch be backported to RHEL (and CentOS) 3.x ?

I am trying to decide between upgrading the kernel to 4.x or just flattening each IDS host and rebuilding them on Ubuntu.  

A patch that makes its way into the 3.1x kernel would be the easiest solution all around for me.

-----Original Message-----
From: Oisf-users [mailto:oisf-users-bounces at lists.openinfosecfoundation.org] On Behalf Of Cooper F. Nelson
Sent: Wednesday, January 18, 2017 18:12 PM
To: Peter Manev <petermanev at gmail.com>; erik clark <philosnef at gmail.com>
Cc: oisf-users at lists.openinfosecfoundation.org
Subject: Re: [Oisf-users] af_packet and rss queue count

I've can confirm I've gotten this working on our system.  4.8.7 kernel/driver.  Big cheers to RedHat for submitting this patch!

-Coop

On 1/9/2017 5:49 AM, Peter Manev wrote:
> On Fri, Jan 6, 2017 at 11:06 AM, erik clark <philosnef at gmail.com> wrote:
>> > Peter, did you have any opportunity to look at this? Just curious 
>> > to hear what, if anything, you may have found.
> Sure - I will let you know as soon as i have feedback, no problem.
> (most likely by the end of this week)
> 


--
Cooper Nelson
Network Security Analyst
UCSD ITS Security Team
cnelson at ucsd.edu x41042