[Oisf-users] Getting Errors on Suricata Startup

[Andreas Herz]

On 23/01/20 at 06:18, Leonard Jacobs wrote:
> I do not want to use af-packet mode.  This sensor is not in-line.  It is on a span port.  I want af-packet disabled.

You can use another mode as Peter mentioned but for af-packet the sensor
does not have to be inline. You can use af-packet in such a scenario as
well and it provides the best performance in most cases.

-- 
Andreas Herz