[Oisf-users] Suricata seperate Rx/Tx connection

[Nelson, Cooper]

That would work with pcap, not sure how AF_PACKET handles bonded interfaces.

We use an Arista with two 10Gbit interfaces and pevma’s config.

-Coop

From: Amar <amar at countersnipe.com>
Sent: Friday, November 1, 2019 8:19 AM
To: mohammad kashif <kashif.alig at gmail.com>
Cc: Nelson, Cooper <cnelson at ucsd.edu>; Oisf-Users <oisf-users at lists.openinfosecfoundation.org>
Subject: Re: [Oisf-users] Suricata seperate Rx/Tx connection

Could bonding be the solution here. Bond eth1 and 2 and simply monitor the bond.

On Nov 1, 2019 at 4:08 PM, <mohammad kashif<mailto:kashif.alig at gmail.com>> wrote:


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20191101/0d9deefa/attachment.html>