[Oisf-users] Getting Errors on Suricata Startup
andi at geekosphere.org
Thu Jan 23 09:07:45 UTC 2020
On 23/01/20 at 06:18, Leonard Jacobs wrote:
> I do not want to use af-packet mode. This sensor is not in-line. It is on a span port. I want af-packet disabled.
You can use another mode as Peter mentioned but for af-packet the sensor
does not have to be inline. You can use af-packet in such a scenario as
well and it provides the best performance in most cases.
More information about the Oisf-users