[Oisf-users] Getting Errors on Suricata Startup

Andreas Herz andi at geekosphere.org
Thu Jan 23 09:07:45 UTC 2020

On 23/01/20 at 06:18, Leonard Jacobs wrote:
> I do not want to use af-packet mode.  This sensor is not in-line.  It is on a span port.  I want af-packet disabled.

You can use another mode as Peter mentioned but for af-packet the sensor
does not have to be inline. You can use af-packet in such a scenario as
well and it provides the best performance in most cases.

Andreas Herz

More information about the Oisf-users mailing list